Analysis

  • max time kernel
    149s
  • max time network
    130s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/07/2026, 12:15

General

  • Target
    Cours n09-3_Protection_Par_Fusibles_Disjoncteurs.doc
  • Size 865KB
  • Sample260702-pezhasgs5p
  • SHA256 4cf7fcb49543389cbdd2d806ff71329625dbbe409037baa6c19cfa7d46854b55
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Cours n09-3_Protection_Par_Fusibles_Disjoncteurs.doc" /o ""
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:5912

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        EE672CDD.wmf

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\EE672CDD.wmf
        • Size 4KB
        • SHA256 f1cdcc3134c5af822e3d36c8948d25c2c154be26f470ae6a1c519aa138e32fb7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iso690.xsl

        • Path C:\Users\Admin\AppData\Local\Temp\TCD88D2.tmp\iso690.xsl
        • Size 263KB
        • SHA256 3f925e0cc1542f09de1f99060899eafb0042bb9682507c907173c392115a44b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/5912-13-0x00007FFA5E9C0000-0x00007FFA5EC23000-memory.dmp

        memory/5912-10-0x00007FFA5E9C0000-0x00007FFA5EC23000-memory.dmp

        memory/5912-5-0x00007FFA5E9C0000-0x00007FFA5EC23000-memory.dmp

        memory/5912-4-0x00007FFA1EB00000-0x00007FFA1EB10000-memory.dmp

        memory/5912-6-0x00007FFA1EB00000-0x00007FFA1EB10000-memory.dmp

        memory/5912-7-0x00007FFA5E9C0000-0x00007FFA5EC23000-memory.dmp

        memory/5912-9-0x00007FFA5E9C0000-0x00007FFA5EC23000-memory.dmp

        memory/5912-8-0x00007FFA5E9C0000-0x00007FFA5EC23000-memory.dmp

        memory/5912-14-0x00007FFA1BF00000-0x00007FFA1BF10000-memory.dmp

        memory/5912-12-0x00007FFA5E9C0000-0x00007FFA5EC23000-memory.dmp

        memory/5912-2-0x00007FFA1EB00000-0x00007FFA1EB10000-memory.dmp

        memory/5912-0-0x00007FFA1EB00000-0x00007FFA1EB10000-memory.dmp

        memory/5912-11-0x00007FFA5E9C0000-0x00007FFA5EC23000-memory.dmp

        memory/5912-15-0x00007FFA5E9C0000-0x00007FFA5EC23000-memory.dmp

        memory/5912-16-0x00007FFA1BF00000-0x00007FFA1BF10000-memory.dmp

        memory/5912-1-0x00007FFA1EB00000-0x00007FFA1EB10000-memory.dmp

        memory/5912-34-0x00007FFA5E9C0000-0x00007FFA5EC23000-memory.dmp

        memory/5912-3-0x00007FFA5EB1F000-0x00007FFA5EB20000-memory.dmp

        memory/5912-464-0x00007FFA1EB00000-0x00007FFA1EB10000-memory.dmp

        memory/5912-465-0x00007FFA1EB00000-0x00007FFA1EB10000-memory.dmp

        memory/5912-467-0x00007FFA1EB00000-0x00007FFA1EB10000-memory.dmp

        memory/5912-466-0x00007FFA1EB00000-0x00007FFA1EB10000-memory.dmp

        memory/5912-468-0x00007FFA5E9C0000-0x00007FFA5EC23000-memory.dmp