Resubmissions
27/11/2024, 05:53
241127-gljresxlek 10Analysis
-
max time kernel
465s -
max time network
426s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
27/11/2024, 05:53
General
-
Target
Updates/90/Shared/Resources/1040/License_SysClrTypes.rtf
-
Size
93KB
-
MD5
d1b4838eacce113758c2b62c239ba8a6
-
SHA1
a3f961de8a40fc4ba065bf4afc8d3845b2f6b9ef
-
SHA256
7a6abd6464105179622ec76d9d20ab892d35c14866cf23dec3175ed6427504d9
-
SHA512
1810d30571012ba9411e983d65904653fdf49fd14cfebffb7a4cffa6b07547f449887ab1df4b0341e7d2102ea1ded77b272ed2012241e870ba8c6144ab2bb54f
-
SSDEEP
768:lgYsOeqbj0duoDN3AmQoHTjUhmqFDPq2WvY7Ggsb3k3CB8yYGTBOrrw9Cgsb325u:lgM2ocN2yydtlc5ds
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Updates\90\Shared\Resources\1040\License_SysClrTypes.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
263KB
MD5ff0e07eff1333cdf9fc2523d323dd654
SHA177a1ae0dd8dbc3fee65dd6266f31e2a564d088a4
SHA2563f925e0cc1542f09de1f99060899eafb0042bb9682507c907173c392115a44b5
SHA512b4615f995fab87661c2dbe46625aa982215d7bde27cafae221dca76087fe76da4b4a381943436fcac1577cb3d260d0050b32b7b93e3eb07912494429f126bb3d
-
Filesize
1KB
MD5801e48cff16f8eaa66950ee2ec3b7beb
SHA15607ed7f858cfb3e395e1d0b20d5cfa3af24c21f
SHA256afd0421c686f76ff5b084648a3e5c5f4e7823d3a3ffe1a2eef6dc04a21af08d9
SHA512176d8f6431c17ec46b9449bdcf17b55d867c610e6d4af4852ddfdae813ad5f78c4b3464faaa9d04b6d610f36a074b139ffb664af9e2afd8010acd68eac6d28de
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
4KB