Analysis
-
max time kernel
65s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
02/08/2023, 20:44
General
-
Target
LECCION CRACKER 1.docx
-
Size
24KB
-
MD5
4f34139284b35c7884333b4cf30202f6
-
SHA1
8de8a5d5f8646a845d17289bad5be8840974595c
-
SHA256
db1be1c34eabe7a84d4d19980a2c6547ec60a18cd45ee2d95e7b0378b449b1ba
-
SHA512
bf8f2ec43da7e9236fca94656d1c1a789912e215b110001067438cf5c34ebd846ce330e78e508553dc04cba90c65a5ccd9d40ffe685a5b2745771552c53008db
-
SSDEEP
768:TtyYFAHYoVOF2OmMjkjb+sCu5uCRPlI/L0Vupm:T75oLOLjk3VdlIDrI
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\LECCION CRACKER 1.docx"1⤵
- Drops file in Windows directory
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\splwow64.exeC:\Windows\splwow64.exe 122882⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
Filesize
1.4MB
-
Filesize
64KB
-
Filesize
44KB
-
Filesize
1.4MB
-
Filesize
44KB