Analysis
-
max time kernel
140s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
26-04-2024 07:34
General
-
Target
ڵʮղѧ2016�.doc
-
Size
39KB
-
MD5
7aef074a2b1c85d82d2aa88f95d86896
-
SHA1
feeb9f773f2481c5e6c056e1672891c8d9c95fba
-
SHA256
6a9a7fb5ee132de6aefad43a64b24e7c85f66531320842d93959a0aeef140c93
-
SHA512
61270c6511b196b2c4f2ae55bdfc7ef20e3eac0b74789b071a913a44b705363efcc60e0fbaa9aa21b152cc675639caae7713cc746a3e03bb205937945b598d58
-
SSDEEP
384:ZGG2GXGGsGGtGGGGGmGG5Va3CVz3lBLiclkmt9iSZfI/PKRciFJWD3cjGYjUX0jg:sa3CVz3lJiwkmthAPoA3xYjaCVf
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\ڵʮղѧ2016�.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3808 --field-trial-handle=2280,i,716736634476467098,11449718822158202904,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
22KB
MD55daad30be1d394c3150a4144c002f347
SHA161c4f63b16b4c3bd88154901b04f26de4dc787a9
SHA2564167ee38ee39998e1330285881d94e43d0435b55c1eff9555c4d70c3743a497e
SHA512776aa19972e82b0414df0748fc943e6f41956ce227643b68273d0eb6237a305a5578e351fb01459a0eeac6ced2a984c461a86bac3114aeabd7771c8cec3e5950
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
15.8MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
15.8MB
-
Filesize
15.8MB
-
Filesize
15.8MB
-
Filesize
15.8MB
-
Filesize
15.8MB
-
Filesize
15.8MB
-
Filesize
64KB
-
Filesize
15.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
15.8MB
-
Filesize
2.0MB
-
Filesize
15.8MB