Analysis
-
max time kernel
150s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
25/11/2022, 23:55
General
-
Target
sanshujiao1/M.doc
-
Size
23KB
-
MD5
a5636ac83a66a9c52306dd01c1fcf011
-
SHA1
b75c47389e227bb94404ce5ae72f9407b057d760
-
SHA256
bacb77fd123073aa6348b8751e7a814c5497b403b07a81afd6b6fa4fb7bd1847
-
SHA512
4fe3918e85089c4d6c028acd9f7eaef4ea3b9b81f24cf5768394d57aa9fd8f20d4e001929c259adb62b8a4af6491916a5752685c738da14ae17a719925f10508
-
SSDEEP
192:4AAnyomoecEISNl7hQSXv09z4N1Nji+bYaYqYdVnPBV6:4AAnysecEISndN/0aNXiwYaYqY
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\sanshujiao1\M.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB