Analysis
- max time kernel
0s - max time network
35s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
29/10/2024, 13:27
General
- Target zxalphamn.rtf
- Size 711KB
- Sample241029-qp6j2awbme
- SHA256 567820aebb552f95bf4346fd52d4b65fa77fb729a5a3d4d997053dc945d60cef
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\zxalphamn.rtf" /o ""1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
sist02.xsl
CUSTOM.DIC
memory/2768-3-0x00007FF7D9E50000-0x00007FF7D9E60000-memory.dmp
memory/2768-17-0x00007FF7D7BF0000-0x00007FF7D7C00000-memory.dmp
memory/2768-9-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp
memory/2768-8-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp
memory/2768-7-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp
memory/2768-2-0x00007FF7D9E50000-0x00007FF7D9E60000-memory.dmp
memory/2768-12-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp
memory/2768-11-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp
memory/2768-14-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp
memory/2768-13-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp
memory/2768-4-0x00007FF7D9E50000-0x00007FF7D9E60000-memory.dmp
memory/2768-15-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp
memory/2768-16-0x00007FF7D7BF0000-0x00007FF7D7C00000-memory.dmp
memory/2768-10-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp
memory/2768-1-0x00007FF7D9E50000-0x00007FF7D9E60000-memory.dmp
memory/2768-0-0x00007FF819E6D000-0x00007FF819E6E000-memory.dmp
memory/2768-5-0x00007FF7D9E50000-0x00007FF7D9E60000-memory.dmp
memory/2768-41-0x00007FF819E6D000-0x00007FF819E6E000-memory.dmp
memory/2768-42-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp
memory/2768-43-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp
memory/2768-46-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp
memory/2768-6-0x00007FF819DD0000-0x00007FF819FC5000-memory.dmp