Analysis
-
max time kernel
143s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
22-07-2024 17:29
General
-
Target
$PLUGINSDIR/license_iolo.rtf
-
Size
61KB
-
MD5
fa686d2f6cee9080150b9c273db7e8ef
-
SHA1
1d9d4db6acdf6c9af6036cc1dc9766a65fe3d298
-
SHA256
9b22e04dd604b521d2f94d5f2f5381b63e4dec75c2ec644605d519070ef2b45e
-
SHA512
46013e6e6e53ca4dd65409e6f42010536f3133e1bacf3266b1e4acbcce5bc7120881fb1105c538103fef415e4125d0537cfbbfe5a3c6b6d55d1448c94f86c334
-
SSDEEP
768:dK6DBjUzF50JEuRwRzR0R1btqYr2wW5VU9YuWcfjWQ7L2vBIBYmSSQJ6j2jCjAcB:sJ5uByJ6BudgboXY
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\license_iolo.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
262KB
MD551d32ee5bc7ab811041f799652d26e04
SHA1412193006aa3ef19e0a57e16acf86b830993024a
SHA2566230814bf5b2d554397580613e20681752240ab87fd354ececf188c1eabe0e97
SHA5125fc5d889b0c8e5ef464b76f0c4c9e61bda59b2d1205ac9417cc74d6e9f989fb73d78b4eb3044a1a1e1f2c00ce1ca1bd6d4d07eeadc4108c7b124867711c31810
-
Filesize
2KB
MD57669275813820236b736abc0faa01323
SHA17bc2ba9f2be1b2dd0f55bf1137dafd291fad94e6
SHA25651a9cdd0a225fc93de2eafd551eb20fd303e6642d7b34910fd8510fafd15c11d
SHA512e4910dd8f67bd784f4f850aeb76a7935a7be72c111649c562a1d4f9076ef7e273aafd8edd2ded18dce60a1fe8a51c4379e725ca9bbe692460d19b74a940c83e9
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB