Analysis
-
max time kernel
194s -
max time network
195s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
30-11-2022 17:35
General
-
Target
03b96ab568d5a4a8d53ee14b6a571bf0fd5de50b6db02555420de7cf3d9737e9.docm
-
Size
83KB
-
MD5
342eac015ea7361729f6fb1506ac4ef1
-
SHA1
e46dd99f1e3dd352abd161f1e8d61aebc062d6a6
-
SHA256
03b96ab568d5a4a8d53ee14b6a571bf0fd5de50b6db02555420de7cf3d9737e9
-
SHA512
6ae4ce90d9966f16bc5220c926ec29aab6250e4928f87201084e84269de2f748b6bb27da611751cd521299946e3050c0e8b277c3bb142adf2a44636e822fdb90
-
SSDEEP
1536:1mS1WExOoRX51j1BPpoynaSlqx1JxpHj3Sc7g2Qh8eH6LG/:AS1XRJHB2yrlqx1Jxh3Sc7g2Qh1aq/
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\03b96ab568d5a4a8d53ee14b6a571bf0fd5de50b6db02555420de7cf3d9737e9.docm" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB