Analysis
-
max time kernel
1482s -
max time network
1453s -
platform
windows11-21h2_x64 -
resource
win11-20240214-en -
resource tags
-
submitted
19-02-2024 12:42
General
-
Target
ppt9FD5.pptx
-
Size
6.6MB
-
MD5
52ef9d25895e4bf3b323e616f39bfd65
-
SHA1
4f16eb2825193e30f51e38f75a5eb7e1ec93ef16
-
SHA256
ea16c4a621467e6ecdbfc2d96f8241a105840897ebeb9dd29f9ee0f899248c9f
-
SHA512
2d4948b8d82b5d041c8f6e1e6bc56bff697cdb47ea2160756103a3a205556e72cb9344dda943f594fecf7acdc308ffd9dfe0cd11f4c1947648b91bebae6f2492
-
SSDEEP
196608:NrBlbyKmJ7Fjha9NnLssqRkKcTspHscm0L:PlbQFjS5+5pHsz0L
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE"C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE" "C:\Users\Admin\AppData\Local\Temp\ppt9FD5.pptx" /ou ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
756KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
756KB