Analysis
-
max time kernel
133s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
24-12-2024 10:34
General
-
Target
doc_main_14.docx
-
Size
107KB
-
MD5
22a592907fe0e0b8cf0e76be20c09e27
-
SHA1
71ba75475b1b33abcb2f55dcd06f232481c2cb90
-
SHA256
73e3a33304c9d736113ee81e5e205a99bba264de4842c6aa87a03a075ef01149
-
SHA512
6cd1274dada327ade67c4242cf46107b8b619e163261f2b93900cb0d1a54f06822c22f49287a8c71ff1bb799f1984ccecda3627fd531df242c5174302a252b22
-
SSDEEP
3072:WeBQAhNHh83WrtH8ynSlP2UUQk+CmLSZd8:PLvB83+cySlVYmL48
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\doc_main_14.docx" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
262KB
MD551d32ee5bc7ab811041f799652d26e04
SHA1412193006aa3ef19e0a57e16acf86b830993024a
SHA2566230814bf5b2d554397580613e20681752240ab87fd354ececf188c1eabe0e97
SHA5125fc5d889b0c8e5ef464b76f0c4c9e61bda59b2d1205ac9417cc74d6e9f989fb73d78b4eb3044a1a1e1f2c00ce1ca1bd6d4d07eeadc4108c7b124867711c31810
-
Filesize
683B
MD52ee2c5d75c6fa16499b45d6d6fc6869b
SHA1e9817a89f3b8552c1a6c3e2c56d71df9e0ed9fb2
SHA25633848539529aeeca7a2440d74eee33c01c67b32d3715f06ca27e00ba5bc6b040
SHA5123362e36ee28b78b5ff70548a9d92511ccc5d21fa8c2b2114b86e451f2032a0c23248cdde8b53e381741a52b6bf62464acf6e0ee959d2831b6d6bb1e8260dd46f
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB