Analysis
-
max time kernel
140s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
25/08/2023, 18:45
Static task
static1
Behavioral task
behavioral1
Sample
RJILLARCHIVE2021/Old Data.docx
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
RJILLARCHIVE2021/Old Data.docx
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
RJILLARCHIVE2021/RJILLARCHIVE2021.pdf.lnk
Resource
win7-20230824-en
Behavioral task
behavioral4
Sample
RJILLARCHIVE2021/RJILLARCHIVE2021.pdf.lnk
Resource
win10v2004-20230703-en
General
-
Target
RJILLARCHIVE2021/Old Data.docx
-
Size
6.9MB
-
MD5
46143bce10da8d47bb3338b35ca17082
-
SHA1
71cd7e0fdbe8803d76d926feee67cc2aaea62a2f
-
SHA256
7b4d1a7298103997022d7d76318ccc71da73c1d0d6234808ab4f606761781585
-
SHA512
07e6ec56f2f60408a7cb43c40e4a269bdd1f4f1ca6607e74b51bd55d068f3c69d75ae05b2be9645397199a7a598a477857681eea5b75a230a037ef7d5d69bd4c
-
SSDEEP
98304:sgujycLbnPnghZBYQQPLjzJzoGpCaPxCMxAqvjnknIJOS28FCRNUQP0ahrXUyPku:sgKIhPYpTXxxZknaOgFA0fUkRh
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
pid Process 2980 WINWORD.EXE 2980 WINWORD.EXE -
Suspicious use of SetWindowsHookEx 7 IoCs
pid Process 2980 WINWORD.EXE 2980 WINWORD.EXE 2980 WINWORD.EXE 2980 WINWORD.EXE 2980 WINWORD.EXE 2980 WINWORD.EXE 2980 WINWORD.EXE