Analysis

  • max time kernel
    142s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-08-2023 05:22

General

  • Target

    License.rtf

  • Size

    24KB

  • MD5

    cc7dd16c0f4e4cc06fc737385a410e8f

  • SHA1

    508e95e8e65675b554e21f215455d850dfd4fe01

  • SHA256

    600cc547310d6511fa459e8cb3cd207be034ce1200fbab19c654277814b261e4

  • SHA512

    87e5fa4d1e3c982d3f41b39cad8db40e73af7cd66fd0887dc783b1ce37a270f8d08dded7799e154f580852a2460daacfb0f17e5861f7a51424e20a7a70583d6f

  • SSDEEP

    384:xE0X7PUs3yALEht5atlc4C+pXxZ/G5B9hf3DiArs2:xfXTUs3RL6t5atlc4C+phZ/W7i8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\License.rtf" /o ""
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/636-133-0x00007FFD87870000-0x00007FFD87880000-memory.dmp

    Filesize

    64KB

  • memory/636-134-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-137-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-138-0x00007FFD87870000-0x00007FFD87880000-memory.dmp

    Filesize

    64KB

  • memory/636-136-0x00007FFD87870000-0x00007FFD87880000-memory.dmp

    Filesize

    64KB

  • memory/636-135-0x00007FFD87870000-0x00007FFD87880000-memory.dmp

    Filesize

    64KB

  • memory/636-139-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-141-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-140-0x00007FFD87870000-0x00007FFD87880000-memory.dmp

    Filesize

    64KB

  • memory/636-142-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-143-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-144-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-145-0x00007FFD84F10000-0x00007FFD84F20000-memory.dmp

    Filesize

    64KB

  • memory/636-146-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-147-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-149-0x00007FFD84F10000-0x00007FFD84F20000-memory.dmp

    Filesize

    64KB

  • memory/636-148-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-150-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-151-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-152-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-153-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-154-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-155-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-159-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-160-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-164-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB

  • memory/636-189-0x00007FFD87870000-0x00007FFD87880000-memory.dmp

    Filesize

    64KB

  • memory/636-191-0x00007FFD87870000-0x00007FFD87880000-memory.dmp

    Filesize

    64KB

  • memory/636-190-0x00007FFD87870000-0x00007FFD87880000-memory.dmp

    Filesize

    64KB

  • memory/636-192-0x00007FFD87870000-0x00007FFD87880000-memory.dmp

    Filesize

    64KB

  • memory/636-193-0x00007FFDC77F0000-0x00007FFDC79E5000-memory.dmp

    Filesize

    2.0MB