Analysis

  • max time kernel
    90s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2023, 04:00

General

  • Target

    b6e5c0406badcddf9a446933f51fddb70f6c2291fe08eb71d258d5457d67dbee_JC.docm

  • Size

    4.7MB

  • MD5

    b390e6672f4d4f66f78bf3f3719dff20

  • SHA1

    0da29451486a4472552ee2bb8cb00e9545416b4e

  • SHA256

    b6e5c0406badcddf9a446933f51fddb70f6c2291fe08eb71d258d5457d67dbee

  • SHA512

    26a8fe666ae66684dc6b0585a699871c47f7c16fbd932d02e07b8ec2dccfa843a8691b958dad713c242af15b81da723d5a2dd9b64b824a948b243399fef2f4b5

  • SSDEEP

    98304:Kyd5l3bFoQVdeG25i/GVQH5y79JXe/8cV+wFsV7b+cMKBR9UXzhFoHfx6Zw:FRoQGieVQH5yhNK8cV+wFslycvBROjcn

Score
1/10

Malware Config

Signatures

  • Office loads VBA resources, possible macro or embedded object present
  • Modifies Internet Explorer settings 1 TTPs 9 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
    "C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\b6e5c0406badcddf9a446933f51fddb70f6c2291fe08eb71d258d5457d67dbee_JC.docm"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:1904

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1904-0-0x000000002F4D1000-0x000000002F4D2000-memory.dmp

          Filesize

          4KB

        • memory/1904-1-0x000000005FFF0000-0x0000000060000000-memory.dmp

          Filesize

          64KB

        • memory/1904-2-0x0000000070C7D000-0x0000000070C88000-memory.dmp

          Filesize

          44KB

        • memory/1904-5-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-6-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-7-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-9-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-8-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-10-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-11-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-13-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-12-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-14-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-17-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-18-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-19-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-20-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-21-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-24-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-23-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-26-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-27-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-28-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-30-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-29-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-32-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-35-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-36-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-34-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-38-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-39-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-40-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-43-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-44-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-45-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-48-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-47-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-50-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-51-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-52-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-54-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-55-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-56-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-58-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-60-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-61-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-62-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-64-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-65-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-67-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-66-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-63-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-59-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-57-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-53-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-49-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-46-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-42-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-41-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-37-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-33-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-31-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-25-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-22-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-16-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-15-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-764-0x0000000070C7D000-0x0000000070C88000-memory.dmp

          Filesize

          44KB

        • memory/1904-840-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-1676-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-2517-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-3353-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-3523-0x0000000000770000-0x0000000000870000-memory.dmp

          Filesize

          1024KB

        • memory/1904-4182-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-4183-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-4687-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-4990-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-5020-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-5364-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-5665-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-5857-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-6501-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-6693-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-6695-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-7221-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-7530-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-7531-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-7884-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-8367-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-8368-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-9003-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-9203-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-9205-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-9518-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-10041-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-10042-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-10498-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-10877-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-10879-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-11386-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-11714-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-11716-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-11718-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-12362-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-12552-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-12554-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-12998-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-13402-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-13735-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-13920-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-14227-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-14229-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-14711-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-15063-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-15065-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-15392-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-15535-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-15901-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-15904-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-16197-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-16357-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-16740-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-16742-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-17035-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-17162-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-17578-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-17580-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-17582-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB

        • memory/1904-17833-0x00000000053A0000-0x00000000054A0000-memory.dmp

          Filesize

          1024KB