Overview
overview
10Static
static
3Setup.exe
windows11-21h2-x64
10$TEMP/Anytime.dot
windows11-21h2-x64
1$TEMP/Attitude.dot
windows11-21h2-x64
1$TEMP/Color.dot
windows11-21h2-x64
1$TEMP/Cons...es.dot
windows11-21h2-x64
1$TEMP/Entitled.dot
windows11-21h2-x64
1$TEMP/Pleased.dot
windows11-21h2-x64
1$TEMP/Richardson.dot
windows11-21h2-x64
1$TEMP/Submitting.dot
windows11-21h2-x64
1$TEMP/Turning.dot
windows11-21h2-x64
1Analysis
-
geolocation tags
nanew-jerseynorth-americaunited-statesususa -
max time kernel
10s -
max time network
12s -
platform
windows11-21h2_x64 -
resource
win11-20250619-en -
resource tags
arch:x64arch:x86image:win11-20250619-enlocale:en-usos:windows11-21h2-x64system -
submitted
01/07/2025, 06:37
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win11-20250619-en
Behavioral task
behavioral2
Sample
$TEMP/Anytime.dot
Resource
win11-20250619-en
Behavioral task
behavioral3
Sample
$TEMP/Attitude.dot
Resource
win11-20250610-en
Behavioral task
behavioral4
Sample
$TEMP/Color.dot
Resource
win11-20250610-en
Behavioral task
behavioral5
Sample
$TEMP/Consequences.dot
Resource
win11-20250619-en
Behavioral task
behavioral6
Sample
$TEMP/Entitled.dot
Resource
win11-20250619-en
Behavioral task
behavioral7
Sample
$TEMP/Pleased.dot
Resource
win11-20250610-en
Behavioral task
behavioral8
Sample
$TEMP/Richardson.dot
Resource
win11-20250619-en
Behavioral task
behavioral9
Sample
$TEMP/Submitting.dot
Resource
win11-20250619-en
Behavioral task
behavioral10
Sample
$TEMP/Turning.dot
Resource
win11-20250610-en
General
-
Target
$TEMP/Consequences.dot
-
Size
87KB
-
MD5
a77ee830abc2608cc2b16d97d8d62322
-
SHA1
631a98da3cf8433d24b5c7e0f220f2613d3d955a
-
SHA256
28140a1897426ea43491b719d3fa3d3567739b0dfac5a9ee15dabbff9aaa6f65
-
SHA512
b6fd9f2baa689190701a9a95602d8c82bc0d3956a6bfd8902dbdc5a19cc3655b3d3ec65a5f97000f84d3223ffce4c683417370ed472de54a6eefff1cec58ac31
-
SSDEEP
1536:S752DTsqtUqaYo9VzV4qvf/qJ93QSYVWO5cKv6Bw4sVy:S7sDJUqRWX4qvf/OQDgO0e4sk
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
pid Process 3180 WINWORD.EXE 3180 WINWORD.EXE -
Suspicious use of SetWindowsHookEx 9 IoCs
pid Process 3180 WINWORD.EXE 3180 WINWORD.EXE 3180 WINWORD.EXE 3180 WINWORD.EXE 3180 WINWORD.EXE 3180 WINWORD.EXE 3180 WINWORD.EXE 3180 WINWORD.EXE 3180 WINWORD.EXE