Analysis
-
max time kernel
137s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
08-12-2022 10:57
General
-
Target
ลิสต์รายการและสเปคของที่ต้องการ.rtf
-
Size
31KB
-
MD5
135ca6b75d76e54276865be252a7e8e7
-
SHA1
9acc0db1a185ed9db3db00149d39aeb124119508
-
SHA256
8ffb3b7f4303ac738f2fc186c3ee5f808fd4f27642af8402b0d7b60bae0ea364
-
SHA512
6a0235536b1a5530d7f1cef4f4fced328b6d3c3ac60875d671d8c58c2ac84a76641e4d3e9ec586a8bd70de2d0defba01003b278bdf7fdc6330ef5b9d25121bee
-
SSDEEP
768:WFx0XaIsnPRIa4fwJMdD0cfcFBmzRgHmQRZU:Wf0Xvx3EMFnyQDmU
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\ลิสต์รายการและสเปคของที่ต้องการ.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB