d2cd99f2ffcad6cc11d3798ad269c5a711ac9a9bd445e940df99b65d8b095d4b | Triage

Analysis

max time kernel
15s
max time network
19s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 02:01

Sharing

Report Analysis Logs

General

Target

WordBook.exe
Size

1.0MB
MD5

8f53c2d99bfa673b55166bcf1ff7d7da
SHA1

926c2a8973e865e97bc8efd2853fe452baf1de9a
SHA256

3c427a32b5f6d01035fbf6ef41e24cec36dbd6bdf2623e92415b3db38cf29c7d
SHA512

06eea32886ed3b710c7ec794296c7cb7aadb82cf8e6efd24e4c7e3441dc32ae17a56b169df5763988ef77cc392e4e54e95abbe89e8886c3450bb0957c82e589e
SSDEEP

24576:0r+oR7XHVaUOt/5pUrbeUAyQ4m2n9OB2U3EZVm54g2Tfj1WwYkSwTBFB:MZ9RQLc9TUmTfj1vSwTBFB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1048	WordBook.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1048	WordBook.exe
1048	WordBook.exe

C:\Users\Admin\AppData\Local\Temp\WordBook.exe
"C:\Users\Admin\AppData\Local\Temp\WordBook.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads