Analysis
-
max time kernel
134s -
max time network
142s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
04/07/2024, 15:21
General
-
Target
American 4th july.pptx
-
Size
1.2MB
-
MD5
65d6f9324b2229b7a4b8c09023569620
-
SHA1
6985b6ee7d16e6d26fedfa85ab354ad7ddb33d2d
-
SHA256
6170fdb24190c1f190f365082277bbd0659a86f69296158d08378187e8e42a16
-
SHA512
c5e029cc525faf1dad48a36b729bf0d74563582757081ee8763c8e85da6ae1562be5401b041cf4f40d975a13da56bfe3e962e2d7bbc5b18b4c8d4fec154bf958
-
SSDEEP
24576:ZbPVBhFuLhCVTIi5klGjVYTDPR5nSfNnn+es6otJPoujBztP:BPVBhEoRIiaVTl5GXh6JAiBF
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE"C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE" "C:\Users\Admin\AppData\Local\Temp\American 4th july.pptx" /ou ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
1.9MB
-
Filesize
64KB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
64KB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
64KB
-
Filesize
1.9MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
1.9MB