Analysis
-
max time kernel
135s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
18-12-2024 21:58
Static task
static1
Behavioral task
behavioral1
Sample
bd016a3a10a8e28d6a1ef688828c73282db9e17246653b71ee347d977628f155.docm
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
bd016a3a10a8e28d6a1ef688828c73282db9e17246653b71ee347d977628f155.docm
Resource
win10v2004-20241007-en
General
-
Target
bd016a3a10a8e28d6a1ef688828c73282db9e17246653b71ee347d977628f155.docm
-
Size
83KB
-
MD5
7e884a5c624f84eb907b43d4518f9fd9
-
SHA1
a93c0597744dc6acd132072ad1ccf11259fd1664
-
SHA256
bd016a3a10a8e28d6a1ef688828c73282db9e17246653b71ee347d977628f155
-
SHA512
dc264281bab9ef3d1c51cc04e9d969ce1990c362fd653ddd4188894d069943fd3a017f5bb94f29bcf910231802b2baf16ae562646471d8572b0da5f3f709b94f
-
SSDEEP
1536:Yj+WqQuctgdgmT1pRFRT0/JDiX9vxgaBtLotjzMLqT+9E/wwkJkT0ioOXCls:k+X8YZPBTgJDwvKavotzMuT+y/wAT0NQ
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
pid Process 2336 WINWORD.EXE 2336 WINWORD.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2336 WINWORD.EXE 2336 WINWORD.EXE 2336 WINWORD.EXE 2336 WINWORD.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\bd016a3a10a8e28d6a1ef688828c73282db9e17246653b71ee347d977628f155.docm" /o ""1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:2336