Analysis
-
max time kernel
122s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
07/07/2024, 17:18
General
-
Target
CONV-FEDERALE CONTRE VOUS (1).docx
-
Size
77KB
-
MD5
681a7ea2c03236cfaafd9a38146d4902
-
SHA1
a6149392dd7ce512cec43f1cf01e597cafe9218a
-
SHA256
00f49394a5d719e67210ff58c4684807c141a451ba076bbc44e0be161dc642ac
-
SHA512
e0d4f984da89e7fd575d5b3fbb61316ee7c894acff5d871ad80f8d8b95f6e3c4dec5d86365053b30bd9a5c7b58375121b03bff7f7172f947ab8565112adca619
-
SSDEEP
1536:FHRtgfMZhgjBLXqAuZpRimt/1e/48DnRkjqaEzI0MkCimt/1e3AEwP8:FHAfHjBLXWjgmt/YA8rRYqI0pzmt/YJv
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
Office loads VBA resources, possible macro or embedded object present
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\CONV-FEDERALE CONTRE VOUS (1).docx"1⤵
- Drops file in Windows directory
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\splwow64.exeC:\Windows\splwow64.exe 122882⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
19KB
MD57e4b47a8267e7aa74ef2a4c1cf89928f
SHA1ef7d307fde8c992b4c9adcbaa68141742dd91500
SHA2560c4f26430cdc6c43ce95f4051b38ab8975a3ab13be26728cd0de18f6238659ec
SHA512fe1a15eae30abeeb084f4bc69875e067138bc93d0ed296dc1fece3c419d720962f3e3e444bdb5c2c2d7484d86f252722b32831e6eaf27e8454d7a8d44af82503
-
Filesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
64KB