Analysis
- max time kernel
149s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
26/04/2026, 12:10
General
- Target DOC/sedgiest.docx
- Size 33KB
- Sample260426-pcfbmscs5n
- SHA256 3b63539bc6e531885e02c4fde3b910cf1cb240ea842c9aa1eef1e72b318b061f
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 3 IoCs
- Suspicious behavior: AddClipboardFormatListener 2 IoCs
- Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\DOC\sedgiest.docx" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
sist02.xsl
CUSTOM.DIC
fb3b0dbfee58fac8.customDestinations-ms
memory/5024-12-0x00007FFF58140000-0x00007FFF58150000-memory.dmp
memory/5024-3-0x00007FFF9A5CD000-0x00007FFF9A5CE000-memory.dmp
memory/5024-6-0x00007FFF5A5B0000-0x00007FFF5A5C0000-memory.dmp
memory/5024-5-0x00007FFF9A530000-0x00007FFF9A725000-memory.dmp
memory/5024-8-0x00007FFF9A530000-0x00007FFF9A725000-memory.dmp
memory/5024-10-0x00007FFF9A530000-0x00007FFF9A725000-memory.dmp
memory/5024-11-0x00007FFF9A530000-0x00007FFF9A725000-memory.dmp
memory/5024-7-0x00007FFF9A530000-0x00007FFF9A725000-memory.dmp
memory/5024-9-0x00007FFF9A530000-0x00007FFF9A725000-memory.dmp
memory/5024-0-0x00007FFF5A5B0000-0x00007FFF5A5C0000-memory.dmp
memory/5024-13-0x00007FFF58140000-0x00007FFF58150000-memory.dmp
memory/5024-4-0x00007FFF5A5B0000-0x00007FFF5A5C0000-memory.dmp
memory/5024-37-0x00007FFF9A530000-0x00007FFF9A725000-memory.dmp
memory/5024-38-0x0000025C32860000-0x0000025C328B5000-memory.dmp
memory/5024-1-0x00007FFF5A5B0000-0x00007FFF5A5C0000-memory.dmp
memory/5024-146-0x0000025C32860000-0x0000025C328B5000-memory.dmp
memory/5024-2-0x00007FFF5A5B0000-0x00007FFF5A5C0000-memory.dmp
memory/5024-180-0x00007FFF5A5B0000-0x00007FFF5A5C0000-memory.dmp
memory/5024-183-0x00007FFF5A5B0000-0x00007FFF5A5C0000-memory.dmp
memory/5024-182-0x00007FFF5A5B0000-0x00007FFF5A5C0000-memory.dmp
memory/5024-181-0x00007FFF5A5B0000-0x00007FFF5A5C0000-memory.dmp
memory/5024-185-0x00007FFF9A530000-0x00007FFF9A725000-memory.dmp
memory/5024-184-0x0000025C32860000-0x0000025C328B5000-memory.dmp