Analysis

  • max time kernel
    146s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/03/2024, 19:42

General

  • Target

    Matematica 1/UNIDAD 1/Numerico.docx

  • Size

    16KB

  • MD5

    930dea8f9ec530f0c882b34f86d8e8b9

  • SHA1

    e25a5ff101031981a310f614648d94784fc9f8fd

  • SHA256

    863a8ee38b4473e7af29aefa09be4cfd429f1d3371348e37bd251071ac34a1be

  • SHA512

    15a39066a41d6ff65852c1287227c03ae8c162a9be9d2297ae16df7b3d4e0480b9b2a19524b731114dd942ff3f344a351dce975655521783d02f9a2af045a260

  • SSDEEP

    384:h+nDNlQLVJkqZffRC4H2vGv/VTu0N0+G/t:YQLVJpZfY4HFVTu91

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Matematica 1\UNIDAD 1\Numerico.docx" /o ""
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:4072

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4072-0-0x00007FF9D2BF0000-0x00007FF9D2C00000-memory.dmp

    Filesize

    64KB

  • memory/4072-1-0x00007FF9D2BF0000-0x00007FF9D2C00000-memory.dmp

    Filesize

    64KB

  • memory/4072-3-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-2-0x00007FF9D2BF0000-0x00007FF9D2C00000-memory.dmp

    Filesize

    64KB

  • memory/4072-5-0x00007FF9D2BF0000-0x00007FF9D2C00000-memory.dmp

    Filesize

    64KB

  • memory/4072-6-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-7-0x00007FF9D2BF0000-0x00007FF9D2C00000-memory.dmp

    Filesize

    64KB

  • memory/4072-4-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-8-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-9-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-10-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-11-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-13-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-12-0x00007FF9D0440000-0x00007FF9D0450000-memory.dmp

    Filesize

    64KB

  • memory/4072-14-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-15-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-16-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-17-0x00007FF9D0440000-0x00007FF9D0450000-memory.dmp

    Filesize

    64KB

  • memory/4072-18-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-19-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-21-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-22-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-23-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-20-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-42-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-43-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-64-0x00007FF9D2BF0000-0x00007FF9D2C00000-memory.dmp

    Filesize

    64KB

  • memory/4072-65-0x00007FF9D2BF0000-0x00007FF9D2C00000-memory.dmp

    Filesize

    64KB

  • memory/4072-66-0x00007FF9D2BF0000-0x00007FF9D2C00000-memory.dmp

    Filesize

    64KB

  • memory/4072-68-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-67-0x00007FF9D2BF0000-0x00007FF9D2C00000-memory.dmp

    Filesize

    64KB

  • memory/4072-69-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB

  • memory/4072-70-0x00007FFA12B70000-0x00007FFA12D65000-memory.dmp

    Filesize

    2.0MB