Analysis
-
max time kernel
73s -
max time network
79s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
13/02/2024, 05:41
General
-
Target
asample_macros3.doc
-
Size
107KB
-
MD5
552e67711e8405dd2982a2f160477d9a
-
SHA1
488fe48f30ef1130ac8c46de3c529fb7d3df2f30
-
SHA256
361588a331a9badacb38701823f0e26e36e66c2da633aa7f0150d238679b78fb
-
SHA512
7cbbaa94cb9bd55043e5e09869434ce2ab93e5b865e162f2b95976d2bd74e112c178d31176e865d7ea53e28aa44d547c9dfd9befef026f3fde58dba8bafaf68d
-
SSDEEP
3072:R92+VwWuYeVJ+6etKUG61//b5o7E3ntG5:R7HsJMtzTlyIXt
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\asample_macros3.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB