Overview
overview
4Static
static
3getword/Ge...rd.dll
windows7-x64
3getword/Ge...rd.dll
windows10-2004-x64
3getword/Ge...rd.dll
windows7-x64
1getword/Ge...rd.dll
windows10-2004-x64
1getword/Ge...mo.exe
windows7-x64
3getword/Ge...mo.exe
windows10-2004-x64
3getword/Ge...NT.dll
windows7-x64
1getword/Ge...NT.dll
windows10-2004-x64
1getword/Ge...lp.chm
windows7-x64
1getword/Ge...lp.chm
windows10-2004-x64
1getword/Ge...me.htm
windows7-x64
1getword/Ge...me.htm
windows10-2004-x64
1getword/Ge...ll.dll
windows7-x64
1getword/Ge...ll.dll
windows10-2004-x64
1getword/Ge...ok.dll
windows7-x64
1getword/Ge...ok.dll
windows10-2004-x64
1getword/Ge...ok.dll
windows7-x64
1getword/Ge...ok.dll
windows10-2004-x64
1getword/Ge...er.bat
windows7-x64
1getword/Ge...er.bat
windows10-2004-x64
1getword/Ge...er.bat
windows7-x64
1getword/Ge...er.bat
windows10-2004-x64
1getword/Ge...in.exe
windows7-x64
4getword/Ge...in.exe
windows10-2004-x64
4getword/Te...rd.dll
windows7-x64
3getword/Te...rd.dll
windows10-2004-x64
3getword/Te...rd.dll
windows7-x64
1getword/Te...rd.dll
windows10-2004-x64
1getword/Te...NT.dll
windows7-x64
1getword/Te...NT.dll
windows10-2004-x64
1getword/Te...lp.chm
windows7-x64
1getword/Te...lp.chm
windows10-2004-x64
1Analysis
-
max time kernel
138s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31-12-2023 00:16
Static task
static1
Behavioral task
behavioral1
Sample
getword/GetWordDemo/GetWord.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
getword/GetWordDemo/GetWord.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
getword/GetWordDemo/GetWord.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
getword/GetWordDemo/GetWord.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
getword/GetWordDemo/GetWordDemo.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
getword/GetWordDemo/GetWordDemo.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
getword/GetWordDemo/GetWordNT.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
getword/GetWordDemo/GetWordNT.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
getword/GetWordDemo/Help.chm
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
getword/GetWordDemo/Help.chm
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
getword/GetWordDemo/How_to_Use/readme.htm
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
getword/GetWordDemo/How_to_Use/readme.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
getword/GetWordDemo/ICall.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
getword/GetWordDemo/ICall.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
getword/GetWordDemo/KeyboardHook.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
getword/GetWordDemo/KeyboardHook.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
getword/GetWordDemo/MouseHook.dll
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
getword/GetWordDemo/MouseHook.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
getword/GetWordDemo/Register.bat
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
getword/GetWordDemo/Register.bat
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
getword/GetWordDemo/UnRegister.bat
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
getword/GetWordDemo/UnRegister.bat
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
getword/GetWordDemo/install_plugin.exe
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
getword/GetWordDemo/install_plugin.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
getword/TextCapture/GetWord.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
getword/TextCapture/GetWord.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
getword/TextCapture/GetWord.dll
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
getword/TextCapture/GetWord.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
getword/TextCapture/GetWordNT.dll
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
getword/TextCapture/GetWordNT.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
getword/TextCapture/Help.chm
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
getword/TextCapture/Help.chm
Resource
win10v2004-20231215-en
General
-
Target
getword/GetWordDemo/install_plugin.exe
-
Size
132KB
-
MD5
23c8ef2065cf5a98024843402db06811
-
SHA1
9c803cfee0d129eaedfba2036e69090b3d57b2fa
-
SHA256
20b4ffd00520e21d20587a7bed50d7dc494b195589774928e7f9948190c61f5c
-
SHA512
7dc9319094cb4239c5c62d9efc322ea8c6fe1a584c0190abbcfecaf18a6f8308884a7aa50f9191228b34785326971ddcbc3407943322afbc162e0b47da05c4ca
-
SSDEEP
1536:dxfZl9SUC12TM438ZJKXDwPqX3RjCA2ZuRuLKpWHdDcMyYXn/XIvEdecxd4pnA89:dDS7J4sHKXySBmJukLv4in5ecxqpAu
Malware Config
Signatures
-
Drops file in Program Files directory 2 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\GetWord.api install_plugin.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\GetWord.api install_plugin.exe