Analysis
- max time kernel
0s - max time network
132s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
03/02/2026, 12:12
General
- Target Запитання для інтерв'ю (1).rtf
- Size 131KB
- Sample260203-pdfnssfx2f
- SHA256 be859b4f4576ec09b69a2ef2d119939f7eb31de121aa01d38e1f0b2290f5a15e
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Запитання для інтерв'ю (1).rtf" /o ""1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
6F032689.wmf
A7E48AF6.wmf
~WRO0000.doc
gb.xsl
index.dat
CUSTOM.DIC
fb3b0dbfee58fac8.customDestinations-ms
memory/2424-13-0x00007FFF252F0000-0x00007FFF254E5000-memory.dmp
memory/2424-11-0x00007FFF252F0000-0x00007FFF254E5000-memory.dmp
memory/2424-15-0x00007FFEE3310000-0x00007FFEE3320000-memory.dmp
memory/2424-8-0x00007FFF252F0000-0x00007FFF254E5000-memory.dmp
memory/2424-6-0x00007FFF252F0000-0x00007FFF254E5000-memory.dmp
memory/2424-2-0x00007FFEE5370000-0x00007FFEE5380000-memory.dmp
memory/2424-3-0x00007FFF2538D000-0x00007FFF2538E000-memory.dmp
memory/2424-1-0x00007FFEE5370000-0x00007FFEE5380000-memory.dmp
memory/2424-0-0x00007FFEE5370000-0x00007FFEE5380000-memory.dmp
memory/2424-10-0x00007FFF252F0000-0x00007FFF254E5000-memory.dmp
memory/2424-4-0x00007FFEE5370000-0x00007FFEE5380000-memory.dmp
memory/2424-14-0x00007FFEE3310000-0x00007FFEE3320000-memory.dmp
memory/2424-75-0x00007FFF252F0000-0x00007FFF254E5000-memory.dmp
memory/2424-12-0x00007FFF252F0000-0x00007FFF254E5000-memory.dmp
memory/2424-9-0x00007FFF252F0000-0x00007FFF254E5000-memory.dmp
memory/2424-7-0x00007FFF252F0000-0x00007FFF254E5000-memory.dmp
memory/2424-5-0x00007FFEE5370000-0x00007FFEE5380000-memory.dmp