Analysis

  • max time kernel
    0s
  • max time network
    37s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/10/2024, 21:34

General

  • Target

    1ba4de3cf7421c893126c14e0a3212fe32f6f6a4dec449aefbcc31181a91ade0.docx

  • Size

    319KB

  • MD5

    134cc6f60ff9cd1cf4d7dfe4d50b095e

  • SHA1

    c0bcf0297ee258bb6f9a8b5de08de4a2c48f357a

  • SHA256

    1ba4de3cf7421c893126c14e0a3212fe32f6f6a4dec449aefbcc31181a91ade0

  • SHA512

    078ee9e29d522b75477a14e9b1d01f15e449ab66708f3e440643d4b30494f6d626a68f606e735cde9c1344b0f59ea597d2d2fa1dcb2aca4305f56ecf4d0d0eee

  • SSDEEP

    6144:N07JHBA0B56szCXqqqqqmzYhuO+FLh5C2z9mL1:Wd/qYYFNHrz96

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\1ba4de3cf7421c893126c14e0a3212fe32f6f6a4dec449aefbcc31181a91ade0.docx" /o ""
    1⤵
      PID:4604

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\6IJLDY7V\ixsT7yV1KrQcQ4E[1].doc

      Filesize

      1.4MB

      MD5

      740b51e1a54c208e5c9c83fc3317fc0e

      SHA1

      e69ad6fc49440e561a14d119937d49e19b23a778

      SHA256

      a3e7d516e9bc973851dd727a31c525d8e946df586e528db14cbeee40cfc075d4

      SHA512

      b8811fec258e9fe20d8dd176364eb787358660a7f04f241635877d7f5354510fa78d13ac69144a3a9f62f631ed4aaf8f1245c6a576677fc884271f88205a77e8

    • C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat

      Filesize

      346B

      MD5

      b94b03f50f79e8b035c973b51fcc70ba

      SHA1

      48c6c83aea54d27fc3f3ded527622e07692bba45

      SHA256

      fb19d7ccb511c899aefaff97d556082204a0da4d7da521caf94a7acc9eabf20e

      SHA512

      901e9dedd23533897c1dc8fab61d968d3000055757edd54f4a8223f9ed5b665c38d45a41e9f0ff8f9845a3dd012d515f45a103f0a93c55cefbc26f0721d24f7d

    • C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851223[[fn=iso690]].xsl

      Filesize

      263KB

      MD5

      ff0e07eff1333cdf9fc2523d323dd654

      SHA1

      77a1ae0dd8dbc3fee65dd6266f31e2a564d088a4

      SHA256

      3f925e0cc1542f09de1f99060899eafb0042bb9682507c907173c392115a44b5

      SHA512

      b4615f995fab87661c2dbe46625aa982215d7bde27cafae221dca76087fe76da4b4a381943436fcac1577cb3d260d0050b32b7b93e3eb07912494429f126bb3d

    • C:\Users\Admin\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC

      Filesize

      16B

      MD5

      d29962abc88624befc0135579ae485ec

      SHA1

      e40a6458296ec6a2427bcb280572d023a9862b31

      SHA256

      a91a702aab9b8dd722843d3d208a21bcfa6556dfc64e2ded63975de4511eb866

      SHA512

      4311e87d8d5559248d4174908817a4ddc917bf7378114435cf12da8ccb7a1542c851812afbaf7dc106771bdb2e2d05f52e7d0c50d110fc7fffe4395592492c2f

    • memory/4604-17-0x00007FFB01C50000-0x00007FFB01C60000-memory.dmp

      Filesize

      64KB

    • memory/4604-5-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-21-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-20-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-0-0x00007FFB43F2D000-0x00007FFB43F2E000-memory.dmp

      Filesize

      4KB

    • memory/4604-16-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-22-0x00007FFB01C50000-0x00007FFB01C60000-memory.dmp

      Filesize

      64KB

    • memory/4604-15-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-13-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-12-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-11-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-10-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-8-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-7-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-6-0x00007FFB03F10000-0x00007FFB03F20000-memory.dmp

      Filesize

      64KB

    • memory/4604-19-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-4-0x00007FFB03F10000-0x00007FFB03F20000-memory.dmp

      Filesize

      64KB

    • memory/4604-2-0x00007FFB03F10000-0x00007FFB03F20000-memory.dmp

      Filesize

      64KB

    • memory/4604-3-0x00007FFB03F10000-0x00007FFB03F20000-memory.dmp

      Filesize

      64KB

    • memory/4604-18-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-14-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-9-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-83-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-82-0x00007FFB43F2D000-0x00007FFB43F2E000-memory.dmp

      Filesize

      4KB

    • memory/4604-85-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-87-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-86-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-84-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-89-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-88-0x00007FFB43E90000-0x00007FFB44085000-memory.dmp

      Filesize

      2.0MB

    • memory/4604-1-0x00007FFB03F10000-0x00007FFB03F20000-memory.dmp

      Filesize

      64KB