Analysis
-
max time kernel
133s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-11-2024 03:46
General
-
Target
Tuyen bo chung Viet Nam - Hoa Ky - Infected and EnCrypted.doc
-
Size
57KB
-
MD5
9ce30fe9bccb3d09b8326d9c2b4326d8
-
SHA1
a9174fec5d81977eee9de2658a92fa9e4de76dd4
-
SHA256
2d20d5751ffbac9290271969860106fdd34309878a1e06f9dbcac23a7f50b571
-
SHA512
ba1dae484f846fbb18df4a3abbb54bcf22549ec4762db34560afacacf226f6c62ca37ad2045193770dcfc1ff61a08e3a47369b6352d5d282146a3afcc91bf83f
-
SSDEEP
768:jwox3E+dBeFwhLsYyB/ZOy8gOKHwlidfeEXy:B3FdBmwhLsYCJH/
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
NTFS ADS 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 14 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Tuyen bo chung Viet Nam - Hoa Ky - Infected and EnCrypted.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
263KB
MD5ff0e07eff1333cdf9fc2523d323dd654
SHA177a1ae0dd8dbc3fee65dd6266f31e2a564d088a4
SHA2563f925e0cc1542f09de1f99060899eafb0042bb9682507c907173c392115a44b5
SHA512b4615f995fab87661c2dbe46625aa982215d7bde27cafae221dca76087fe76da4b4a381943436fcac1577cb3d260d0050b32b7b93e3eb07912494429f126bb3d
-
Filesize
57KB
MD5de5e787fab205e90e8e89e02b09e85f2
SHA19d329f4edad1d71005f800b3204d7575770a6241
SHA256490f10c9a9fbefbe4834b656b6c805dcc396bae93aca396ce8f467a105b1a28f
SHA512a84e73fd6083393440b09bf8b7771df59dd471a3c0141910b7fee96d037f905301447b2a925b0b42ada098e147185581b86224c363b4fd405baf3051e0e45bf6
-
Filesize
3KB
MD54a4604cc5291e903db44b87aacb6de47
SHA1347645bc012f6b1123f8ae2646501ad18205260e
SHA25638187b0a3c797a09436dd4ff3d9a3d4abfc9e50b0fe1cf1460cdec3e259c6e6f
SHA51291709508b94b6792a24cc691e556e1b0a25cd9ab5d433e7bc48f242f4ac55178bddeab94f9b028c1cddcf103dc00f5b565a3f4dca66b60cfeb20aeb06d3ae61c
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB