4d7b6b272b1b1a1a80c7f04943025cc3a612ab575035a180ef5045c665b9a269

Analysis

max time kernel
139s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
15/08/2023, 06:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4d7b6b272b1b1a1a80c7f04943025cc3a612ab575035a180ef5045c665b9a269.docx
Size

40KB
MD5

8daa1f6be76f9b9955a089e7fe6b28df
SHA1

fafc03e8eafba9e9b193f842441a3c9bf805378b
SHA256

4d7b6b272b1b1a1a80c7f04943025cc3a612ab575035a180ef5045c665b9a269
SHA512

1f89d1515bd8f2f6b7ae29b894f6ec4c6e8511ce042aa89397baccc9f0eebd371b851d25bca6d62c72024c08e31f1d575eb82c4d7f4b2bb90f06b88c1303cad7
SSDEEP

768:gpGFdChfgJzq8Qb+RNdmcGjX8ueyTJ74paSKR6UKx6o8dj293D66lG:kGaBOTQKRNdmc+lKKdg98

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
940	WINWORD.EXE
940	WINWORD.EXE

Suspicious use of SetWindowsHookEx 9 IoCs

pid	Process
940	WINWORD.EXE
940	WINWORD.EXE
940	WINWORD.EXE
940	WINWORD.EXE
940	WINWORD.EXE
940	WINWORD.EXE
940	WINWORD.EXE
940	WINWORD.EXE
940	WINWORD.EXE

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\4d7b6b272b1b1a1a80c7f04943025cc3a612ab575035a180ef5045c665b9a269.docx" /o ""
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
memory/940-151-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-134-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-137-0x00007FFC3A1F0000-0x00007FFC3A200000-memory.dmp

Filesize
64KB

Download
memory/940-136-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-138-0x00007FFC3A1F0000-0x00007FFC3A200000-memory.dmp

Filesize
64KB

Download
memory/940-139-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-140-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-141-0x00007FFC3A1F0000-0x00007FFC3A200000-memory.dmp

Filesize
64KB

Download
memory/940-142-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-143-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-144-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-145-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-146-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-147-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-148-0x00007FFC37BB0000-0x00007FFC37BC0000-memory.dmp

Filesize
64KB

Download
memory/940-149-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-135-0x00007FFC3A1F0000-0x00007FFC3A200000-memory.dmp

Filesize
64KB

Download
memory/940-150-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-152-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-153-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-154-0x00007FFC37BB0000-0x00007FFC37BC0000-memory.dmp

Filesize
64KB

Download
memory/940-133-0x00007FFC3A1F0000-0x00007FFC3A200000-memory.dmp

Filesize
64KB

Download
memory/940-169-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-170-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-171-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-172-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-173-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-174-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-175-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-176-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download
memory/940-204-0x00007FFC3A1F0000-0x00007FFC3A200000-memory.dmp

Filesize
64KB

Download
memory/940-205-0x00007FFC3A1F0000-0x00007FFC3A200000-memory.dmp

Filesize
64KB

Download
memory/940-206-0x00007FFC3A1F0000-0x00007FFC3A200000-memory.dmp

Filesize
64KB

Download
memory/940-207-0x00007FFC3A1F0000-0x00007FFC3A200000-memory.dmp

Filesize
64KB

Download
memory/940-208-0x00007FFC7A170000-0x00007FFC7A365000-memory.dmp

Filesize
2.0MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads