Analysis
-
max time kernel
133s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04-10-2024 16:53
General
-
Target
$PLUGINSDIR/FavoritEN.rtf
-
Size
18KB
-
MD5
262c7499f2472459c8c0df84f60f9954
-
SHA1
024ff26be0bd6de211778e6d3e0c87ee52f028eb
-
SHA256
d80cfdb34bc01157d22664efd1db7f85d7188d2848484477da30da6b92bbc35b
-
SHA512
b9307c882381c4ad4a1af320ade48332d0c843e72d6d35045acd7cecf0b90ffeacba8388563badc9fd7657e33f3f1c2fd6a6b63303afe5b0e888f8256f47bcb5
-
SSDEEP
384:yuxl5n2Y5XbyigFY9tX+0lS5kCUhKe/QSwjhsjvTDKbxXG9sXIkeYxwtYlIeJh2Z:1h2aaY9tXZlEkCyKe/QSwjhsjvTDKbx+
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\FavoritEN.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
245KB
MD5f883b260a8d67082ea895c14bf56dd56
SHA17954565c1f243d46ad3b1e2f1baf3281451fc14b
SHA256ef4835db41a485b56c2ef0ff7094bc2350460573a686182bc45fd6613480e353
SHA512d95924a499f32d9b4d9a7d298502181f9e9048c21dbe0496fa3c3279b263d6f7d594b859111a99b1a53bd248ee69b867d7b1768c42e1e40934e0b990f0ce051e
-
Filesize
3KB
MD52e1733e4c205892ae368c19312136140
SHA1bb13b1dd574fac5051397f0f02ee83266f26aa00
SHA256ca1c640d5d94dfe145294672db8243fc9a0551ed584513e93ba6f8ea41803fd3
SHA512130a35056d3da559621d67d0c23385ad285c56910f555cb12e9f4d38363b58ec31ce24dbfe799ebaf85b1868d1a61b9e6502c3a23fcf25d9e18c0c3e877e610b
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB