Analysis
-
max time kernel
150s -
max time network
214s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11-10-2023 19:06
General
-
Target
owo bot/info.rtf
-
Size
1KB
-
MD5
b975ac17d8cda6473cc36e52aeb3a26e
-
SHA1
d22376023f27fd8ee773e015a25ad81f3f04fcda
-
SHA256
845fa5d51bf9a2804a1ef2958913c92746892af019ad27ab9e282b43cbf4d582
-
SHA512
2235e9d1912892c0199d507e45e86303ac71c4a4c0ee367e905cbc019c5bae0034bfa750c9b98cad3b06f27ae7150ef017c8de39fd2762eab04d600fd870c984
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 7 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\owo bot\info.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB