Analysis

  • max time kernel
    121s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-08-2023 05:25

General

  • Target

    License.rtf

  • Size

    24KB

  • MD5

    cc7dd16c0f4e4cc06fc737385a410e8f

  • SHA1

    508e95e8e65675b554e21f215455d850dfd4fe01

  • SHA256

    600cc547310d6511fa459e8cb3cd207be034ce1200fbab19c654277814b261e4

  • SHA512

    87e5fa4d1e3c982d3f41b39cad8db40e73af7cd66fd0887dc783b1ce37a270f8d08dded7799e154f580852a2460daacfb0f17e5861f7a51424e20a7a70583d6f

  • SSDEEP

    384:xE0X7PUs3yALEht5atlc4C+pXxZ/G5B9hf3DiArs2:xfXTUs3RL6t5atlc4C+phZ/W7i8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\License.rtf" /o ""
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:2568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2568-134-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-133-0x00007FFC74230000-0x00007FFC74240000-memory.dmp

    Filesize

    64KB

  • memory/2568-135-0x00007FFC74230000-0x00007FFC74240000-memory.dmp

    Filesize

    64KB

  • memory/2568-137-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-136-0x00007FFC74230000-0x00007FFC74240000-memory.dmp

    Filesize

    64KB

  • memory/2568-139-0x00007FFC74230000-0x00007FFC74240000-memory.dmp

    Filesize

    64KB

  • memory/2568-138-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-140-0x00007FFC74230000-0x00007FFC74240000-memory.dmp

    Filesize

    64KB

  • memory/2568-141-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-142-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-143-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-144-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-145-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-146-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-147-0x00007FFC71930000-0x00007FFC71940000-memory.dmp

    Filesize

    64KB

  • memory/2568-148-0x00007FFC71930000-0x00007FFC71940000-memory.dmp

    Filesize

    64KB

  • memory/2568-152-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-153-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-154-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-155-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB

  • memory/2568-183-0x00007FFC74230000-0x00007FFC74240000-memory.dmp

    Filesize

    64KB

  • memory/2568-184-0x00007FFC74230000-0x00007FFC74240000-memory.dmp

    Filesize

    64KB

  • memory/2568-185-0x00007FFC74230000-0x00007FFC74240000-memory.dmp

    Filesize

    64KB

  • memory/2568-186-0x00007FFC74230000-0x00007FFC74240000-memory.dmp

    Filesize

    64KB

  • memory/2568-187-0x00007FFCB41B0000-0x00007FFCB43A5000-memory.dmp

    Filesize

    2.0MB