Analysis
-
max time kernel
101s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
06-11-2022 08:52
General
-
Target
Victoria 5.37 Portable/Help/Русский/dcomemo.rtf
-
Size
5KB
-
MD5
190fe7511f89148f6a9a928a40e446b4
-
SHA1
914686dffc21d193d7023f1f637f88420cb48c6a
-
SHA256
412c444c4964149afc99a8dbf9ad7da975a81bf605c264770536438349901ad6
-
SHA512
ec5079bf91bbc72e6937566962583c1784e9f0b7b6ce2abe9b418f23fcb7da901cbb7fed131d6db3f394d199fabb00cfb9cefedba816fe45dd810fe42701d2e0
-
SSDEEP
96:5+DfMwJKmgUn+lZSmkODOMgtZXAjlMhTigMRJWBGUJ5zIiUGtm7c5lHLNaUthdTC:kDfM0KVU+SQgfXAjmhcxMzjtm7c5lHLW
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 7 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Victoria 5.37 Portable\Help\Русский\dcomemo.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB