Analysis
-
max time kernel
151s -
max time network
187s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
07-12-2022 11:46
General
-
Target
BOOKING- SHIPMENT DOCS- ORDER 10038574 10038565.rtf
-
Size
25KB
-
MD5
76ce4cfe5dad029abff24fc30be1403d
-
SHA1
effbcd4525862d04b16cc0147847af534c0de83d
-
SHA256
9556c06806c14dfcfc716d3d8ec91fff72cf5fefee8c28c77af9c07d915895b9
-
SHA512
a39b4532a0b46ddcae44a1bea090b1d6cdd81047a8509431f42ff8f4e9cec909474a3a01e33fc02def6703538db66ff462258d2a2af5aa4e2c00a20e065bed32
-
SSDEEP
768:KFx0XaIsnPRIa4fwJMjpIAO/G94/gjFUGm:Kf0Xvx3EMyTG94IRg
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\BOOKING- SHIPMENT DOCS- ORDER 10038574 10038565.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB