Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
27-11-2022 05:09
General
-
Target
professional/ϵͳ.doc
-
Size
45KB
-
MD5
614edd00c2aeb6bf6dee8fec637e73b1
-
SHA1
838d58aba92e2089cc702af4ed47f6117443430a
-
SHA256
956f5bf88111b3752cb3edf3ac3709abe3a5563b29d8d2722af94146c66be6b3
-
SHA512
cb7e9e3116ef0f1345cd68de8f84f2408901e05c9eda12c26afd19e0c76e0eb1b98a2147f3c3c89b09b5d14b6722fea7aea132b68d5a6199784c9052ea45383d
-
SSDEEP
384:hQepgd2j5m86XgEfQij7eVS3QE1rB4YYe8Tx2Y6+POEuct+J:hQeq66X0s7qS35FWofC19+J
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 16 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\professional\ϵͳ.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB