Analysis

  • max time kernel
    144s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 00:53

General

  • Target

    data1748814.rtf

  • Size

    838KB

  • MD5

    c7f5c3a2511cb98c24d3dd96692dd9d1

  • SHA1

    230e58a20d409c0625533a29cf3256e9b342d239

  • SHA256

    6f7bd92726a05557f40bcc6fe2d1cedd37f1fb0d484739d369ed787003d845b8

  • SHA512

    564f7493606f05bddcf5c5945a008fa950113cb9926acae16545d085e3232c4a87b77f55485f8e70cc6e57112881f4fd6ac491df8cf96bc483b0cdfbd73f35d0

  • SSDEEP

    24576:2fVMB4bd69Xzl3U1zwNivZ1lqy4njfyzEFuLtI8:2tMB4bd6ZzeGiRqy8fyFBI8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 9 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 14 IoCs

Processes

  • C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
    "C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\data1748814.rtf"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:376

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/376-0-0x000000002FB91000-0x000000002FB92000-memory.dmp

    Filesize

    4KB

  • memory/376-1-0x000000005FFF0000-0x0000000060000000-memory.dmp

    Filesize

    64KB

  • memory/376-2-0x000000007136D000-0x0000000071378000-memory.dmp

    Filesize

    44KB

  • memory/376-5-0x000000007136D000-0x0000000071378000-memory.dmp

    Filesize

    44KB