Overview

overview

8

Static

static

8

b53ffc9409...2d.doc

windows7-x64

7

b53ffc9409...2d.doc

windows10-2004-x64

1

Analysis

  • max time kernel
    286s
  • max time network
    302s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-11-2022 21:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b53ffc940917b7049f0fe5e37b849a7f25dbc532cd56451d2a5364f83a49462d.doc

  • Size

    53KB

  • MD5

    51ec5df5fdac67e7080891992267d112

  • SHA1

    2fd5dfa60be9d61c6955c08d2b91ed8aa2c3e36a

  • SHA256

    b53ffc940917b7049f0fe5e37b849a7f25dbc532cd56451d2a5364f83a49462d

  • SHA512

    808d42acf457625d3f7283294c6eb872d35fcf664195786786f6e11591a30ff4d272479d1a6f62c2e3d128c6cb18c907a25909a8a80583e141e5ad156d52dcb3

  • SSDEEP

    768:T3tKj5LH0qe2bNXU2isF8jvtcIYdYQtRff:TctLHNer2iVY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\b53ffc940917b7049f0fe5e37b849a7f25dbc532cd56451d2a5364f83a49462d.doc" /o ""
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:3432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3432-132-0x00007FF9879F0000-0x00007FF987A00000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3432-133-0x00007FF9879F0000-0x00007FF987A00000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3432-134-0x00007FF9879F0000-0x00007FF987A00000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3432-135-0x00007FF9879F0000-0x00007FF987A00000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3432-136-0x00007FF9879F0000-0x00007FF987A00000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3432-137-0x00007FF9851C0000-0x00007FF9851D0000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3432-138-0x00007FF9851C0000-0x00007FF9851D0000-memory.dmp
    Filesize

    64KB

    Download