Overview

overview

4

Static

static

3

getword/Ge...rd.dll

windows7-x64

3

getword/Ge...rd.dll

windows10-2004-x64

3

getword/Ge...rd.dll

windows7-x64

1

getword/Ge...rd.dll

windows10-2004-x64

1

getword/Ge...mo.exe

windows7-x64

3

getword/Ge...mo.exe

windows10-2004-x64

3

getword/Ge...NT.dll

windows7-x64

1

getword/Ge...NT.dll

windows10-2004-x64

1

getword/Ge...lp.chm

windows7-x64

1

getword/Ge...lp.chm

windows10-2004-x64

1

getword/Ge...me.htm

windows7-x64

1

getword/Ge...me.htm

windows10-2004-x64

1

getword/Ge...ll.dll

windows7-x64

1

getword/Ge...ll.dll

windows10-2004-x64

1

getword/Ge...ok.dll

windows7-x64

1

getword/Ge...ok.dll

windows10-2004-x64

1

getword/Ge...ok.dll

windows7-x64

1

getword/Ge...ok.dll

windows10-2004-x64

1

getword/Ge...er.bat

windows7-x64

1

getword/Ge...er.bat

windows10-2004-x64

1

getword/Ge...er.bat

windows7-x64

1

getword/Ge...er.bat

windows10-2004-x64

1

getword/Ge...in.exe

windows7-x64

4

getword/Ge...in.exe

windows10-2004-x64

4

getword/Te...rd.dll

windows7-x64

3

getword/Te...rd.dll

windows10-2004-x64

3

getword/Te...rd.dll

windows7-x64

1

getword/Te...rd.dll

windows10-2004-x64

1

getword/Te...NT.dll

windows7-x64

1

getword/Te...NT.dll

windows10-2004-x64

1

getword/Te...lp.chm

windows7-x64

1

getword/Te...lp.chm

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    215a0916919d9528f8472534b43d37c3

  • Size

    794KB

  • Sample

    231231-aklfascgbn

  • MD5

    215a0916919d9528f8472534b43d37c3

  • SHA1

    7226a52a228aaa892ada207763bd210c12132f5b

  • SHA256

    8e1006e5f230f269bb9ce80e5c2b7f3b930cb68f3d975697d45b4e4bae33ce58

  • SHA512

    e196e998ec89678ecb7eddeed765d9102685b1e9e4603fbf1a0ea31f3689af097b94c60a298d9e81dbf9e3a2a1fa1a26b4c462d6c47d6e115887126017798ccb

  • SSDEEP

    12288:27eiliVwg/H+XKUXFYfiDPGxmJ0fCx3luYqORPDajQ1n+QeGAWi3KO5rIkLGAhEG:qj8eXKAFiaFG3Y/R+81evbik+DPkx7x

Score
4/10

Malware Config

Targets

    • Target

      getword/GetWordDemo/GetWord.api

    • Size

      92KB

    • MD5

      8cbc928d295827bee94e4987cf1f064a

    • SHA1

      6b628b0dc872d328b9266bbbde23157f284f1831

    • SHA256

      9d34f20efc1138c893bdcd24b7b65962c012541bb38cc064d4e438a382262723

    • SHA512

      fdf4f4c1af267e27233be512e3e5c2876dd06474f1a333c79dc3bdf660040e21c85f5d39751e34871a025e4dede113f9747a5e70daa1d881b1ef409282028288

    • SSDEEP

      1536:fzel4+/L5Dei33WwgWmDc5df4p7eRzgS5M+Qij:f+4653Ww75dkS5MAj

    Score
    3/10
    behavioral1behavioral2

    • Target

      getword/GetWordDemo/GetWord.ocx

    • Size

      372KB

    • MD5

      e4d9fc212b6e3057e093d81524c13c97

    • SHA1

      ef52ba74fa9ee6d47605d2a8b25f7fc433239673

    • SHA256

      6f2305465ad753638676592d9fbd16539405564b7fb63a76a51caa2f274976a1

    • SHA512

      84f15fca30c9277e9e2b1f853665655387f54ba2aa84d91fb05bac31480599f58177c086a059b41f894e1f2a653577310f48b1ca3a3f8927a2f65e04c7997028

    • SSDEEP

      6144:HwL+jlLchpTOK2SRBRvI0+iEERrMir+oB2Vi25DqJRoXN:Hw+8OK1p+LER7yoBEi25x

    Score
    1/10
    behavioral3behavioral4

    • Target

      getword/GetWordDemo/GetWordDemo.exe

    • Size

      316KB

    • MD5

      fd9770a9c859d0cfe76df04cecd7f453

    • SHA1

      8317f1bab822d3644e2a9dfa19f5cbc3d86ed651

    • SHA256

      d5b03e721c20fe63237dadfcf3e9e78ed2f2d4f69c117a4d9b0d6d0f500d0b9e

    • SHA512

      325c7404e878f95ad1f396d6e5cdf3b51ba699915afcb724863999d23e9f975403097226b3f72b64856e1a6efb0752b99c6956025644f3302d33e44f2e72a7af

    • SSDEEP

      6144:/3hbWYjgDzw/vce4u8cB3gSPDC1bSoqQCz3uY:Zj+evz4ZcB39ClrCzN

    Score
    3/10
    behavioral5behavioral6

    • Target

      getword/GetWordDemo/GetWordNT.dll

    • Size

      128KB

    • MD5

      8770a5e0d05fb51879ca8b14673e7588

    • SHA1

      d1632d1256e5e1a52137d569d9af40f09b2dc796

    • SHA256

      96ac3ce2b0c7f26a8e745b1d54286eda5dcbf57523543a5bfff44df8c2d3e41b

    • SHA512

      2e8251bbccb667345ba4d0275da7b5f3fa7f817943aa998eb7d4c750f7070ff4cc900bfefdfcc409c1be94def5dd69cf83e4ec6a28f434459794e6108ab7b6e7

    • SSDEEP

      1536:EmaSfDN7zm/xo/NL9B5TdXA14SYsCWgB1kgC4e3SbckYb55B6Zo:vN7Sy/Z3A4WgdC4ISbckO55BOo

    Score
    1/10
    behavioral7behavioral8

    • Target

      getword/GetWordDemo/Help.chm

    • Size

      228KB

    • MD5

      bca17cd577aa13507d6bc8675e1d88b8

    • SHA1

      af9918880636377381cd9d6dc9c844fa020f5cd0

    • SHA256

      21460945c6608ed987a003a9bd94287ddf5ad6f34f9f55d780f8b93fd8137efd

    • SHA512

      6e9c542d405eabc5ce7cd286e263a9fbb69840f9714b236fabe1355aa6636b1ea17e645b41c4097eeee71a174439f8955768a05eb69d1dc09b85e617696d877a

    • SSDEEP

      6144:z/hlgxpsSALsGm8TBKMQY3ULTA3Wd/hIUjYa1Qpo:rhlCppAuiBTkLTAm7RjYuQy

    Score
    1/10
    behavioral10behavioral9

    • Target

      getword/GetWordDemo/How_to_Use/readme.htm

    • Size

      2KB

    • MD5

      8299bc50612924152f1b173430a44ff7

    • SHA1

      76bd2a58343fbf0ea2cf304d8a92ec1bcb7561e1

    • SHA256

      c69c9a4a6154127cf192b9ff8e46bb5ac294fc4c5b81f2c934e78bf67f2d4f59

    • SHA512

      788425c909eb8af9b713b611ffe5e16641a4c656895f8b6edc7b5190d2db9f0996d5eb76b15edb8a2f430e496e37069d79932c32291f946e068ce30d8f3fd048

    Score
    1/10
    behavioral11behavioral12

    • Target

      getword/GetWordDemo/ICall.dll

    • Size

      296KB

    • MD5

      5afe274909bc4fe3fa47c94e8efad7d6

    • SHA1

      c72f79d0f12c10f29b0c4863b892d309810c011c

    • SHA256

      fec968f4d9915e86ad27ac6066eddba21ce8c288552e14c528a91035c43da986

    • SHA512

      155bc0af92995763c538b8cadced32c7d4853a6f3483c2205522bb12c14673889f581504fb00f68c917edd4f37fa10501bbd904bbe041e36a334704b88ae9cc6

    • SSDEEP

      6144:T8VVwdPLemV7aErviSxjA5moMpKqvFhLfjE:qVaPamRtjANwKGFF

    Score
    1/10
    behavioral13behavioral14

    • Target

      getword/GetWordDemo/KeyboardHook.dll

    • Size

      68KB

    • MD5

      7258f9793ff19c30c77e5169a5a8c4a8

    • SHA1

      4117a380230ba84addacfcbf5fd0d09af98fb162

    • SHA256

      f95677ec7c697a73de1a2bb413a5f89feb9aa60cd94ff18e0252ed27a2172eab

    • SHA512

      1512226abf1ef64617708cecf60d63fb083f7d0b4add2583b7c98afc8f415178c2d84e5593059893f10e0b5e205add05a633ad6978bcdd50cfbc9df0b15f7c63

    • SSDEEP

      768:Wk8rhQ/RjHZK92cWezmR8ZtIG+O6cvu/ib5sEGHyH:Wk8+Jj5S/fT+OfWs5sEX

    Score
    1/10
    behavioral15behavioral16

    • Target

      getword/GetWordDemo/MouseHook.dll

    • Size

      72KB

    • MD5

      36a5fa0c122bfb9dab0a9860b0cd0ae0

    • SHA1

      22ab4141394d54d085cec9be80e2ece15be551ec

    • SHA256

      3b9c0424a7ad9514f0a148bcd7a52632c254a81d6ac47e495537df009b1bc2fc

    • SHA512

      b0314e5c8270b6c5c17bb0b0212510f6b0d6c143ef6b08c6d0822f13f563df5a52c9227cb46c7972d3e689b55ed826f9f8767bd34105fee684d2b71d810ab438

    • SSDEEP

      768:xv7iC/TUButS1jZ1c53wPc+SwW8VGK25/ebnib5RX2:gC/TU4sLyVbF8VGK62b05p

    Score
    1/10
    behavioral17behavioral18

    • Target

      getword/GetWordDemo/Register.bat

    • Size

      30B

    • MD5

      bfb33e46ae08524265e37587fee7a6e0

    • SHA1

      73a5603a68f1e882b461d23d11909bc084e27c9e

    • SHA256

      0681594aba1892d5a8afe667d784113bc4e3d9475620cd8689c6e28f7537c35f

    • SHA512

      4b280f3400f0e959c9f399c5159fdf37f69ab194a5a84e89a536a2172f5cdc1b7b4c25c0821489993ffca4952f7c7105cdf8d5bae8646af1559b9ac25233ae10

    Score
    1/10
    behavioral19behavioral20

    • Target

      getword/GetWordDemo/UnRegister.bat

    • Size

      30B

    • MD5

      454cdee88e9e7850ee5f17ec175f8828

    • SHA1

      a2b4708b4beb95a2c0476e6cde6eb5c4e72d5a2a

    • SHA256

      25268f7e573d1da204abb5e2be2d9d59c216c2896324966b5d3484fd4cf134bf

    • SHA512

      28a0a91385ded399f2dc291ff227021949ad3a089451786810837ca51cb1ef9e41ef9f66fd59878a4409adc6b08b0de3c70a35c25cfd12c8518f959e991f962c

    Score
    1/10
    behavioral21behavioral22

    • Target

      getword/GetWordDemo/install_plugin.exe

    • Size

      132KB

    • MD5

      23c8ef2065cf5a98024843402db06811

    • SHA1

      9c803cfee0d129eaedfba2036e69090b3d57b2fa

    • SHA256

      20b4ffd00520e21d20587a7bed50d7dc494b195589774928e7f9948190c61f5c

    • SHA512

      7dc9319094cb4239c5c62d9efc322ea8c6fe1a584c0190abbcfecaf18a6f8308884a7aa50f9191228b34785326971ddcbc3407943322afbc162e0b47da05c4ca

    • SSDEEP

      1536:dxfZl9SUC12TM438ZJKXDwPqX3RjCA2ZuRuLKpWHdDcMyYXn/XIvEdecxd4pnA89:dDS7J4sHKXySBmJukLv4in5ecxqpAu

    Score
    4/10
    behavioral23behavioral24

    • Target

      getword/TextCapture/GetWord.api

    • Size

      92KB

    • MD5

      8cbc928d295827bee94e4987cf1f064a

    • SHA1

      6b628b0dc872d328b9266bbbde23157f284f1831

    • SHA256

      9d34f20efc1138c893bdcd24b7b65962c012541bb38cc064d4e438a382262723

    • SHA512

      fdf4f4c1af267e27233be512e3e5c2876dd06474f1a333c79dc3bdf660040e21c85f5d39751e34871a025e4dede113f9747a5e70daa1d881b1ef409282028288

    • SSDEEP

      1536:fzel4+/L5Dei33WwgWmDc5df4p7eRzgS5M+Qij:f+4653Ww75dkS5MAj

    Score
    3/10
    behavioral25behavioral26

    • Target

      getword/TextCapture/GetWord.ocx

    • Size

      372KB

    • MD5

      e4d9fc212b6e3057e093d81524c13c97

    • SHA1

      ef52ba74fa9ee6d47605d2a8b25f7fc433239673

    • SHA256

      6f2305465ad753638676592d9fbd16539405564b7fb63a76a51caa2f274976a1

    • SHA512

      84f15fca30c9277e9e2b1f853665655387f54ba2aa84d91fb05bac31480599f58177c086a059b41f894e1f2a653577310f48b1ca3a3f8927a2f65e04c7997028

    • SSDEEP

      6144:HwL+jlLchpTOK2SRBRvI0+iEERrMir+oB2Vi25DqJRoXN:Hw+8OK1p+LER7yoBEi25x

    Score
    1/10
    behavioral27behavioral28

    • Target

      getword/TextCapture/GetWordNT.dll

    • Size

      128KB

    • MD5

      8770a5e0d05fb51879ca8b14673e7588

    • SHA1

      d1632d1256e5e1a52137d569d9af40f09b2dc796

    • SHA256

      96ac3ce2b0c7f26a8e745b1d54286eda5dcbf57523543a5bfff44df8c2d3e41b

    • SHA512

      2e8251bbccb667345ba4d0275da7b5f3fa7f817943aa998eb7d4c750f7070ff4cc900bfefdfcc409c1be94def5dd69cf83e4ec6a28f434459794e6108ab7b6e7

    • SSDEEP

      1536:EmaSfDN7zm/xo/NL9B5TdXA14SYsCWgB1kgC4e3SbckYb55B6Zo:vN7Sy/Z3A4WgdC4ISbckO55BOo

    Score
    1/10
    behavioral29behavioral30

    • Target

      getword/TextCapture/Help.chm

    • Size

      228KB

    • MD5

      bca17cd577aa13507d6bc8675e1d88b8

    • SHA1

      af9918880636377381cd9d6dc9c844fa020f5cd0

    • SHA256

      21460945c6608ed987a003a9bd94287ddf5ad6f34f9f55d780f8b93fd8137efd

    • SHA512

      6e9c542d405eabc5ce7cd286e263a9fbb69840f9714b236fabe1355aa6636b1ea17e645b41c4097eeee71a174439f8955768a05eb69d1dc09b85e617696d877a

    • SSDEEP

      6144:z/hlgxpsSALsGm8TBKMQY3ULTA3Wd/hIUjYa1Qpo:rhlCppAuiBTkLTAm7RjYuQy

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks