Analysis

  • max time kernel
    145s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/07/2023, 08:57

General

  • Target

    oświadczenia zakup bez faktury.docx

  • Size

    12KB

  • MD5

    b77b3b4d9982ad02f31038cf96b67564

  • SHA1

    d7d7339563e9f7c2286735ae02a20c8d0b7df02c

  • SHA256

    9c16fac47b85ea8dadbe2a4725f6c8a4f4b79fe1c11308ea2678855252265d3c

  • SHA512

    5fb84244140999e6bcc73331aef6bd67bb9d090616429360e654337755afc6e0796dd9592d0afdb8f5ef734c690d1429774fcfdf5ad230b31a74b19c452a9a52

  • SSDEEP

    192:CtI2K0KC4KidzYpM5rw3rnX9f+tMExGZicFsSE+qJBl5yAp:aI2cjKmYi5rwbX9WtMEuicFRMzTyAp

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\oświadczenia zakup bez faktury.docx" /o ""
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:3752

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3752-133-0x00007FFE91770000-0x00007FFE91780000-memory.dmp

    Filesize

    64KB

  • memory/3752-135-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-134-0x00007FFE91770000-0x00007FFE91780000-memory.dmp

    Filesize

    64KB

  • memory/3752-136-0x00007FFE91770000-0x00007FFE91780000-memory.dmp

    Filesize

    64KB

  • memory/3752-138-0x00007FFE91770000-0x00007FFE91780000-memory.dmp

    Filesize

    64KB

  • memory/3752-139-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-137-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-140-0x00007FFE91770000-0x00007FFE91780000-memory.dmp

    Filesize

    64KB

  • memory/3752-141-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-142-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-143-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-144-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-146-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-145-0x00007FFE8F280000-0x00007FFE8F290000-memory.dmp

    Filesize

    64KB

  • memory/3752-147-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-148-0x00007FFE8F280000-0x00007FFE8F290000-memory.dmp

    Filesize

    64KB

  • memory/3752-149-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-150-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-151-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-152-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-157-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-158-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-162-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB

  • memory/3752-185-0x00007FFE91770000-0x00007FFE91780000-memory.dmp

    Filesize

    64KB

  • memory/3752-186-0x00007FFE91770000-0x00007FFE91780000-memory.dmp

    Filesize

    64KB

  • memory/3752-188-0x00007FFE91770000-0x00007FFE91780000-memory.dmp

    Filesize

    64KB

  • memory/3752-187-0x00007FFE91770000-0x00007FFE91780000-memory.dmp

    Filesize

    64KB

  • memory/3752-189-0x00007FFED16F0000-0x00007FFED18E5000-memory.dmp

    Filesize

    2.0MB