Analysis
- user interaction
yes - max time kernel
1s - max time network
5s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
29/04/2026, 09:24
General
- Target Explain why the Nazi police state reduced opposition after 1933.docx
- Size 21KB
- Sample260429-ldff9ad12j
- SHA256 91bf48c11b00955a7bd198852246d0c4f691e7400a0d6762a0ebed4cc61a86ff
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 2 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Explain why the Nazi police state reduced opposition after 1933.docx" /o ""1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
CUSTOM.DIC
memory/1240-9-0x00007FFC5B190000-0x00007FFC5B385000-memory.dmp
memory/1240-10-0x00007FFC5B190000-0x00007FFC5B385000-memory.dmp
memory/1240-1-0x00007FFC1B210000-0x00007FFC1B220000-memory.dmp
memory/1240-4-0x000001B49F320000-0x000001B49F330000-memory.dmp
memory/1240-5-0x00007FFC1B210000-0x00007FFC1B220000-memory.dmp
memory/1240-7-0x00007FFC1B210000-0x00007FFC1B220000-memory.dmp
memory/1240-2-0x00007FFC1B210000-0x00007FFC1B220000-memory.dmp
memory/1240-8-0x00007FFC5B190000-0x00007FFC5B385000-memory.dmp
memory/1240-11-0x00007FFC5B190000-0x00007FFC5B385000-memory.dmp
memory/1240-0-0x00007FFC1B210000-0x00007FFC1B220000-memory.dmp
memory/1240-13-0x00007FFC5B190000-0x00007FFC5B385000-memory.dmp
memory/1240-12-0x00007FFC5B190000-0x00007FFC5B385000-memory.dmp
memory/1240-14-0x00007FFC18F40000-0x00007FFC18F50000-memory.dmp
memory/1240-16-0x00007FFC18F40000-0x00007FFC18F50000-memory.dmp
memory/1240-15-0x000001B49F2F0000-0x000001B49F300000-memory.dmp
memory/1240-3-0x00007FFC5B22D000-0x00007FFC5B22E000-memory.dmp