Analysis

  • max time kernel
    263s
  • max time network
    299s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-11-2022 10:07

General

  • Target

    0dc4f465af070ed0e15c1ab5932956fa8542688bb4e0de37b6efdc32b63cf8b1.doc

  • Size

    83KB

  • MD5

    f10e42cca60a2a6636658666f3621aef

  • SHA1

    d1f688c01deec0efefc6ce16f604ef7bcc2cceaf

  • SHA256

    0dc4f465af070ed0e15c1ab5932956fa8542688bb4e0de37b6efdc32b63cf8b1

  • SHA512

    926954ad8cd94ecacc854dd2e2dbe04381d820e643f2679f068294d614ef5a609ef8dc6c77f2d83c8d6e771b40acedda083951bfe68073d451990b5b9ab06113

  • SSDEEP

    1536:Vr+qGuBAdGxunrK96wiTk0DOUIgexxFNxh:VStfG96w4k02dND

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\0dc4f465af070ed0e15c1ab5932956fa8542688bb4e0de37b6efdc32b63cf8b1.doc" /o ""
    1⤵
      PID:3648

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3648-132-0x00007FF866290000-0x00007FF8662A0000-memory.dmp
      Filesize

      64KB

    • memory/3648-134-0x00007FF866290000-0x00007FF8662A0000-memory.dmp
      Filesize

      64KB

    • memory/3648-133-0x00007FF866290000-0x00007FF8662A0000-memory.dmp
      Filesize

      64KB

    • memory/3648-135-0x00007FF866290000-0x00007FF8662A0000-memory.dmp
      Filesize

      64KB

    • memory/3648-136-0x00007FF866290000-0x00007FF8662A0000-memory.dmp
      Filesize

      64KB

    • memory/3648-137-0x00007FF864080000-0x00007FF864090000-memory.dmp
      Filesize

      64KB