Resubmissions
27/11/2024, 05:53
241127-gljresxlek 10Analysis
-
max time kernel
466s -
max time network
426s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
27/11/2024, 05:53
General
-
Target
Updates/90/Shared/Resources/1041/License_SysClrTypes.rtf
-
Size
146KB
-
MD5
b434e82c320fb18cfd61e6bae77538ac
-
SHA1
f4f0010960f743679b6d05b045ea6719aa6f4300
-
SHA256
a0d6afe63e1000a16e9851e56e8280b314c438059c34024908f63a1c4c2f25ed
-
SHA512
e4674c44f3ae3cdee238a4fdc33650db08eb8119346d8236ea9130d53ba4da28701499a3610c03a3918d83bac18c5872f28c8c8818a4f877c1097e3b1f196dd3
-
SSDEEP
768:1oaLTZQhcJpkp7qpElp5PAzl+bP6NAAsw+3HC74CbE0/s0w7yRBgf/piyjZCoQb/:1o6GL4E1qLmGTgq6XxUisxwo
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 10 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Updates\90\Shared\Resources\1041\License_SysClrTypes.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
262KB
MD551d32ee5bc7ab811041f799652d26e04
SHA1412193006aa3ef19e0a57e16acf86b830993024a
SHA2566230814bf5b2d554397580613e20681752240ab87fd354ececf188c1eabe0e97
SHA5125fc5d889b0c8e5ef464b76f0c4c9e61bda59b2d1205ac9417cc74d6e9f989fb73d78b4eb3044a1a1e1f2c00ce1ca1bd6d4d07eeadc4108c7b124867711c31810
-
Filesize
1KB
MD51374edf01ae57c993ab0cd12c158468f
SHA1a31b36cc189038ee315f4ad03e81077fb16c8ef1
SHA256feb8c28ac66fd8f87735c12f8a7d0017cb622ef1b36845ef5dcc3e53e8d3b74d
SHA5121cd9d45cf4c4dbec2ab8fa6af6bba4e77d8c8201af47e11be4720b898a1432f3e25a828e4b1579c769d1b52e09bbea0275e1ffb72fe797641eabd77a54290188
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
4KB