Analysis
-
max time kernel
144s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
22-07-2024 13:48
Static task
static1
Behavioral task
behavioral1
Sample
NFQ24-0420(R1).exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
NFQ24-0420(R1).exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
cafeteaterets.dot
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
cafeteaterets.dot
Resource
win10v2004-20240709-en
General
-
Target
cafeteaterets.dot
-
Size
6KB
-
MD5
713e92c6b3c5b8faf325e98283d3e487
-
SHA1
a8d31c97c5bc47c53ef7ef3379ed2886d3919b6b
-
SHA256
17e8442b7fa4c2a092db9ec5052d79c16fa35c529f467a5f85ec27bd2f407483
-
SHA512
579518a3a6d2be76fc939790900d4431ba5897d6d0bd7bea9626620632af168b46ab397963166675e8c95f6ed86e0c2511010fb091f49783482d5202ccf37d23
-
SSDEEP
96:WJCmj6ruITI+KzqMAsdnIKVai8sUucnqQh3wZOc71xoign4lU557I:ECmjOXXKYCnIEaPeiAZBoPA
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 560 WINWORD.EXE -
Suspicious use of SetWindowsHookEx 14 IoCs
pid Process 560 WINWORD.EXE 560 WINWORD.EXE 560 WINWORD.EXE 560 WINWORD.EXE 560 WINWORD.EXE 560 WINWORD.EXE 560 WINWORD.EXE 560 WINWORD.EXE 560 WINWORD.EXE 560 WINWORD.EXE 560 WINWORD.EXE 560 WINWORD.EXE 560 WINWORD.EXE 560 WINWORD.EXE