Analysis
-
max time kernel
281s -
max time network
336s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
25-11-2022 19:23
General
-
Target
体系/内部审核不符合报告/NO-004不符合项报告.rtf
-
Size
43KB
-
MD5
e454b351984bee4ba55aa6c92eb57eb4
-
SHA1
77a566b7312771048c259c77625061fb3b08c6fe
-
SHA256
01b76a0fa51dbe1a982c6f0bd87eb550e7b2ea45a006b369cd1f89ad069bcb58
-
SHA512
c7e85899764cf56f6cb5983508cad0a3346613cc8b9aa2bc92675a6458da9a9a33cbdf1b7a3c8dc3af7f181bc1839493b265a60f64922091ec77d52bad8888f3
-
SSDEEP
768:x06oJvmO2G5zKfX2NUoG9CzAZjLIKzQFkDB7awAbeQY2UVKTcj9sKf/LXAeAaeAT:d9La1m
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\体系\内部审核不符合报告\NO-004不符合项报告.rtf" /o ""1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2480-132-0x00007FFAC2D90000-0x00007FFAC2DA0000-memory.dmpFilesize
64KB
-
memory/2480-133-0x00007FFAC2D90000-0x00007FFAC2DA0000-memory.dmpFilesize
64KB
-
memory/2480-134-0x00007FFAC2D90000-0x00007FFAC2DA0000-memory.dmpFilesize
64KB
-
memory/2480-135-0x00007FFAC2D90000-0x00007FFAC2DA0000-memory.dmpFilesize
64KB
-
memory/2480-136-0x00007FFAC2D90000-0x00007FFAC2DA0000-memory.dmpFilesize
64KB
-
memory/2480-137-0x00007FFAC0890000-0x00007FFAC08A0000-memory.dmpFilesize
64KB
-
memory/2480-138-0x00007FFAC0890000-0x00007FFAC08A0000-memory.dmpFilesize
64KB