Analysis
-
max time kernel
133s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
06-11-2022 08:52
General
-
Target
Victoria 5.37 Portable/USB_SupportList.rtf
-
Size
10KB
-
MD5
f566493c6cb084ef1360d58cf36d441d
-
SHA1
3f9948445663723eb707fd45144fea4e13ab1434
-
SHA256
43f3560e21418001b6aa5f319e6431d8310692899437727fe099fe580b1afeff
-
SHA512
2c1dca1a527d69013088062e3dbd3333ad62e1e367bdccdb6f036f8fac5b784398e19023b1b9aed68ea6c6779a65004658cc5588ab9a61c75d2bf0035e6d431c
-
SSDEEP
192:zVQ6UTi4ygQbjVfNYepa3t+qyDmN8qMGxwD9KwS8kXcFmDfpylp0ETmlojyHcPeL:6e4y16eG+q29ZS8sTp6xT2YLEmkOD2
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Victoria 5.37 Portable\USB_SupportList.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB