Analysis

  • max time kernel
    218s
  • max time network
    239s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 13:38

General

  • Target

    RFQ20221123.rtf

  • Size

    25KB

  • MD5

    6b2016dc99a6adbb0f7354674e5db3f4

  • SHA1

    a5e510cd04b00a59e486520f629d7942211e3044

  • SHA256

    f6ff722eb25d04d2d6a8f024c4e570abb07b4450fd14fbd491230b9953c5032f

  • SHA512

    fd03c6a717185f3017cccac70f572558d40019378853702cdfba12eab02b48d3dd5fa4b9e85cae3f7934954660653c0fc982ba1c47028420ac32b3ec8a70db41

  • SSDEEP

    768:YFx0XaIsnPRIa4fwJDEgyQapsGdcf4A/QyoVZIkvvE:Yf0Xvx3EDrb3G+AA/Q3wkHE

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\RFQ20221123.rtf" /o ""
    1⤵
      PID:4244

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4244-132-0x00007FFD831B0000-0x00007FFD831C0000-memory.dmp

      Filesize

      64KB

    • memory/4244-133-0x00007FFD831B0000-0x00007FFD831C0000-memory.dmp

      Filesize

      64KB

    • memory/4244-134-0x00007FFD831B0000-0x00007FFD831C0000-memory.dmp

      Filesize

      64KB

    • memory/4244-135-0x00007FFD831B0000-0x00007FFD831C0000-memory.dmp

      Filesize

      64KB

    • memory/4244-136-0x00007FFD831B0000-0x00007FFD831C0000-memory.dmp

      Filesize

      64KB