Analysis

  • max time kernel
    144s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22-07-2024 13:48

General

  • Target

    cafeteaterets.dot

  • Size

    6KB

  • MD5

    713e92c6b3c5b8faf325e98283d3e487

  • SHA1

    a8d31c97c5bc47c53ef7ef3379ed2886d3919b6b

  • SHA256

    17e8442b7fa4c2a092db9ec5052d79c16fa35c529f467a5f85ec27bd2f407483

  • SHA512

    579518a3a6d2be76fc939790900d4431ba5897d6d0bd7bea9626620632af168b46ab397963166675e8c95f6ed86e0c2511010fb091f49783482d5202ccf37d23

  • SSDEEP

    96:WJCmj6ruITI+KzqMAsdnIKVai8sUucnqQh3wZOc71xoign4lU557I:ECmjOXXKYCnIEaPeiAZBoPA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 14 IoCs

Processes

  • C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
    "C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\cafeteaterets.dot"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/560-0-0x000000002F811000-0x000000002F812000-memory.dmp

    Filesize

    4KB

  • memory/560-2-0x000000007166D000-0x0000000071678000-memory.dmp

    Filesize

    44KB

  • memory/560-1-0x000000005FFF0000-0x0000000060000000-memory.dmp

    Filesize

    64KB

  • memory/560-4-0x000000007166D000-0x0000000071678000-memory.dmp

    Filesize

    44KB