Overview

overview

10

Static

static

8

Sixt_recei...55.doc

windows7-x64

10

Sixt_recei...55.doc

windows10-2004-x64

1

Analysis

  • max time kernel
    274s
  • max time network
    336s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 07:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Sixt_receipt_81642755.doc

  • Size

    43KB

  • MD5

    4af54c2a93186c9c296811f06dad2e68

  • SHA1

    d9bb7523d1df1679665af1779544e7c799d28ab2

  • SHA256

    49e78fedd58dc44feda7a6b02d833011e51a2a7633fa673fe80ef4b0ad483e7e

  • SHA512

    5f29945ca8b97f5a89859f67b2faae8b103462bc31287780213337d0566d69fb7804dc29aca39cc8752f1ad0d2ecd4a09e163e33b6240d85a31c367d79fe1c08

  • SSDEEP

    384:Y1RKuNFkrWmLTY0jNk4UsyZ0jUe61tAZU5ygpIA:aBk3TYOUfVe61tAZU5rpIA

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Sixt_receipt_81642755.doc" /o ""
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/952-132-0x00007FFEFC670000-0x00007FFEFC680000-memory.dmp
    Filesize

    64KB

    Download
  • memory/952-133-0x00007FFEFC670000-0x00007FFEFC680000-memory.dmp
    Filesize

    64KB

    Download
  • memory/952-134-0x00007FFEFC670000-0x00007FFEFC680000-memory.dmp
    Filesize

    64KB

    Download
  • memory/952-135-0x00007FFEFC670000-0x00007FFEFC680000-memory.dmp
    Filesize

    64KB

    Download
  • memory/952-136-0x00007FFEFC670000-0x00007FFEFC680000-memory.dmp
    Filesize

    64KB

    Download
  • memory/952-137-0x00007FFEFA340000-0x00007FFEFA350000-memory.dmp
    Filesize

    64KB

    Download