Analysis

  • max time kernel
    2s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 01:11

General

  • Target

    1f81a16de19d4f4a746cb2e4ff42eedf.doc

  • Size

    30KB

  • MD5

    1f81a16de19d4f4a746cb2e4ff42eedf

  • SHA1

    6f4b3ba1130fa08ff83857447e221e281b3d9616

  • SHA256

    cff8ce540886d96bc449ffbc6784e2d1c6761586990d824bd546f3f86c7f8dc3

  • SHA512

    bee82380fa84b955a563801002c6f5f59b8f32e13853c9f7210055351084fc80ad4fdc16e5fef07564223696d3682a3987d14299ae89b82586683ce9cde2a5fc

  • SSDEEP

    192:FxV5oDwBVd6nu0/rwjXeiUYtepx9uiUHoA1l0YgLVMnCxd:7roDwYnu0zwjXeiRt4CikoAj0YHn

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\1f81a16de19d4f4a746cb2e4ff42eedf.doc" /o ""
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2304

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2304-0-0x00007FFB7A3D0000-0x00007FFB7A3E0000-memory.dmp

          Filesize

          64KB

        • memory/2304-3-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-5-0x00007FFB7A3D0000-0x00007FFB7A3E0000-memory.dmp

          Filesize

          64KB

        • memory/2304-8-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-9-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-10-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-12-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-14-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-16-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-20-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-19-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-18-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-17-0x00007FFB78080000-0x00007FFB78090000-memory.dmp

          Filesize

          64KB

        • memory/2304-15-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-13-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-11-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-6-0x00007FFB7A3D0000-0x00007FFB7A3E0000-memory.dmp

          Filesize

          64KB

        • memory/2304-7-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-4-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-2-0x00007FFB7A3D0000-0x00007FFB7A3E0000-memory.dmp

          Filesize

          64KB

        • memory/2304-1-0x00007FFB7A3D0000-0x00007FFB7A3E0000-memory.dmp

          Filesize

          64KB

        • memory/2304-22-0x00007FFB78080000-0x00007FFB78090000-memory.dmp

          Filesize

          64KB

        • memory/2304-37-0x00000257287F0000-0x00000257297C0000-memory.dmp

          Filesize

          15.8MB

        • memory/2304-56-0x00000257287F0000-0x00000257297C0000-memory.dmp

          Filesize

          15.8MB

        • memory/2304-64-0x00000257287F0000-0x00000257297C0000-memory.dmp

          Filesize

          15.8MB

        • memory/2304-66-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-70-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-71-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-74-0x00000257287F0000-0x00000257297C0000-memory.dmp

          Filesize

          15.8MB

        • memory/2304-75-0x00000257287F0000-0x00000257297C0000-memory.dmp

          Filesize

          15.8MB

        • memory/2304-76-0x00000257287F0000-0x00000257297C0000-memory.dmp

          Filesize

          15.8MB

        • memory/2304-84-0x00000257287F0000-0x00000257297C0000-memory.dmp

          Filesize

          15.8MB

        • memory/2304-111-0x00007FFB7A3D0000-0x00007FFB7A3E0000-memory.dmp

          Filesize

          64KB

        • memory/2304-114-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-116-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-115-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-113-0x00007FFBBA350000-0x00007FFBBA545000-memory.dmp

          Filesize

          2.0MB

        • memory/2304-112-0x00007FFB7A3D0000-0x00007FFB7A3E0000-memory.dmp

          Filesize

          64KB

        • memory/2304-110-0x00007FFB7A3D0000-0x00007FFB7A3E0000-memory.dmp

          Filesize

          64KB

        • memory/2304-109-0x00007FFB7A3D0000-0x00007FFB7A3E0000-memory.dmp

          Filesize

          64KB