Analysis

  • max time kernel
    136s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/08/2023, 05:51

General

  • Target

    BID-758472938.rtf

  • Size

    122KB

  • MD5

    13a3f6521c13ba0c632db67c7041c977

  • SHA1

    5dd8153d6daa7d000fbb5c9c9760bc2f57b27a1c

  • SHA256

    409992d0436f5256bc7bf86bbe08d7c41d13103c59f1cfc35885d1608a3e7286

  • SHA512

    410fa352b9ae96e604f07c7b1ecd34fe24b6d80fed05cfd2dde6b9e5c5c22a8419a6c7463d7234706dd76f8e6b2de2d44f3a18bd6c5c8286d2decd7373cbc01b

  • SSDEEP

    768:vwAbZSibMX9gRWjzAvwVO4xNX027K0zNKiCzaYF4bwvvh1D6:vwAlRsAvH4fX023zv95wvvS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\BID-758472938.rtf" /o ""
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:1644

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1644-133-0x00007FFF68B70000-0x00007FFF68B80000-memory.dmp

          Filesize

          64KB

        • memory/1644-134-0x00007FFFA8AF0000-0x00007FFFA8CE5000-memory.dmp

          Filesize

          2.0MB

        • memory/1644-136-0x00007FFF68B70000-0x00007FFF68B80000-memory.dmp

          Filesize

          64KB

        • memory/1644-135-0x00007FFF68B70000-0x00007FFF68B80000-memory.dmp

          Filesize

          64KB

        • memory/1644-137-0x00007FFFA8AF0000-0x00007FFFA8CE5000-memory.dmp

          Filesize

          2.0MB

        • memory/1644-138-0x00007FFFA8AF0000-0x00007FFFA8CE5000-memory.dmp

          Filesize

          2.0MB

        • memory/1644-140-0x00007FFFA8AF0000-0x00007FFFA8CE5000-memory.dmp

          Filesize

          2.0MB

        • memory/1644-139-0x00007FFF68B70000-0x00007FFF68B80000-memory.dmp

          Filesize

          64KB

        • memory/1644-141-0x00007FFF68B70000-0x00007FFF68B80000-memory.dmp

          Filesize

          64KB

        • memory/1644-142-0x00007FFFA8AF0000-0x00007FFFA8CE5000-memory.dmp

          Filesize

          2.0MB

        • memory/1644-143-0x00007FFFA8AF0000-0x00007FFFA8CE5000-memory.dmp

          Filesize

          2.0MB

        • memory/1644-144-0x00007FFF669B0000-0x00007FFF669C0000-memory.dmp

          Filesize

          64KB

        • memory/1644-145-0x00007FFF669B0000-0x00007FFF669C0000-memory.dmp

          Filesize

          64KB

        • memory/1644-149-0x00007FFFA8AF0000-0x00007FFFA8CE5000-memory.dmp

          Filesize

          2.0MB

        • memory/1644-150-0x00007FFFA8AF0000-0x00007FFFA8CE5000-memory.dmp

          Filesize

          2.0MB

        • memory/1644-151-0x00007FFFA8AF0000-0x00007FFFA8CE5000-memory.dmp

          Filesize

          2.0MB

        • memory/1644-179-0x00007FFF68B70000-0x00007FFF68B80000-memory.dmp

          Filesize

          64KB

        • memory/1644-180-0x00007FFF68B70000-0x00007FFF68B80000-memory.dmp

          Filesize

          64KB

        • memory/1644-181-0x00007FFF68B70000-0x00007FFF68B80000-memory.dmp

          Filesize

          64KB

        • memory/1644-182-0x00007FFF68B70000-0x00007FFF68B80000-memory.dmp

          Filesize

          64KB

        • memory/1644-183-0x00007FFFA8AF0000-0x00007FFFA8CE5000-memory.dmp

          Filesize

          2.0MB