Analysis
-
max time kernel
113s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
26-01-2023 16:35
General
-
Target
4e1c9dafeb733168680cfb000a4bf023e0851b1ee250dcf66677ff92cfa7387d.rtf
-
Size
23KB
-
MD5
f84ce914a6c913fd32119823d456b5d2
-
SHA1
9d9c7ae03fb2ae3c1bd86077008e95a982a0471a
-
SHA256
4e1c9dafeb733168680cfb000a4bf023e0851b1ee250dcf66677ff92cfa7387d
-
SHA512
93eddabf951fca0a3945611fc8380743cb13a4256804b976d46d551e48cbf7ef7ef728fa6f9f759be3e993ea72282442ab05da91a603ee626083c63a2fd1ad70
-
SSDEEP
384:KQMmdOFNYY0aaaIswqPeOrka1+fHQJ+t3rQkRhZ4y4hPTORhvw5MZKlNTd:GFx0XaIsnPRIa4fwJMfu6RhwuW5
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\4e1c9dafeb733168680cfb000a4bf023e0851b1ee250dcf66677ff92cfa7387d.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB