Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
19/07/2024, 21:37
General
-
Target
$PLUGINSDIR/license_Ciuvo.rtf
-
Size
36KB
-
MD5
ba4c90081e04285a65dc539bb7ecc1b5
-
SHA1
858a3c8f576a5369ca6c1c19288c7601224454bb
-
SHA256
36438f8057a12df36d93c249b90cff0df7d50b70aa4ee9053bf5902e6f5e8340
-
SHA512
17d01f17643cc978aa855916ccb2fea15c7b8742f91d5c6b42b64062fb6aa8b826ed2c769ea35a4308ef6746a67df1c20c81cc63e5ec45e8caafff10eb9baa07
-
SSDEEP
192:Oe66QzSvmgoUpYzKCXHjJnaKFQusE+VjcQh+gg+KpehSJSy3zS2GRerpadVB5NAx:u6wStoUpYSKcYAWJjMdT5ivZfF
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\license_Ciuvo.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
263KB
MD5ff0e07eff1333cdf9fc2523d323dd654
SHA177a1ae0dd8dbc3fee65dd6266f31e2a564d088a4
SHA2563f925e0cc1542f09de1f99060899eafb0042bb9682507c907173c392115a44b5
SHA512b4615f995fab87661c2dbe46625aa982215d7bde27cafae221dca76087fe76da4b4a381943436fcac1577cb3d260d0050b32b7b93e3eb07912494429f126bb3d
-
Filesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
Filesize
1KB
MD5259f26f09044f37d8bdb40d2b4b1cc20
SHA1fc85ff7caf34bc04637fc48db5d1f6b3198897de
SHA256999686af5f032f907043600803938b05a5afa32b5ae0272bdeeec1d6c503f87a
SHA512a511f5f144be313cab0e60ad9ec08e64ada7a2d64249e7dd661010aa10eeb44fd1ed4a113d391de4bab14cb4461ac13889b47e3a3aa3af08a2a692d23366ea84
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB