Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
26/08/2023, 14:15
Static task
static1
Behavioral task
behavioral1
Sample
1ec35958e0005a3ef9083f86baaab2877a2260fb19af3050845dfd9a529a5d5f_JC.rtf
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1ec35958e0005a3ef9083f86baaab2877a2260fb19af3050845dfd9a529a5d5f_JC.rtf
Resource
win10v2004-20230703-en
General
-
Target
1ec35958e0005a3ef9083f86baaab2877a2260fb19af3050845dfd9a529a5d5f_JC.rtf
-
Size
1.7MB
-
MD5
12ed0417db74bb3a26ff33e0102c7e0d
-
SHA1
d22e2341ae648d0f93c69ded04076c7e01308689
-
SHA256
1ec35958e0005a3ef9083f86baaab2877a2260fb19af3050845dfd9a529a5d5f
-
SHA512
551ea57695014587bd32fc7f66bfec36eaa36522998b7f37245c6b14244d292160129781bf5b3501853f1c2032068636ba234442c9be2d9528cc891d9d2d1a50
-
SSDEEP
24576:KTubWS13b7AdD5ur01PUfUCSeDBl3fC6teOQsbQiKIp9VsviMq/0X9yfWk6CYb+E:2
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
pid Process 1176 WINWORD.EXE 1176 WINWORD.EXE -
Suspicious use of SetWindowsHookEx 7 IoCs
pid Process 1176 WINWORD.EXE 1176 WINWORD.EXE 1176 WINWORD.EXE 1176 WINWORD.EXE 1176 WINWORD.EXE 1176 WINWORD.EXE 1176 WINWORD.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\1ec35958e0005a3ef9083f86baaab2877a2260fb19af3050845dfd9a529a5d5f_JC.rtf" /o ""1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1176