Analysis
- max time kernel
149s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 06:32
Static task
static1
Behavioral task
behavioral1
Sample
Formularz-asortymentowo-cenowy-srodki-czystosci.odt
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Formularz-asortymentowo-cenowy-srodki-czystosci.odt
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
General
- Target Formularz-asortymentowo-cenowy-srodki-czystosci.odt
- Size 39KB
- Sample260730-ha121aek4v
- SHA256 e4a0094ba24bebca0230abbb45851a82f07df7813f0c43397e449d1542fb8cff
- MD5 80183fe02e016f163b2a3010a6f29cc2
- SHA1 f639f580a4ae3d8db79f23d910227826e53e4316
- SHA512 f1b6a541666453a2301c0a2fa80641991f33bce582652e2f330cbbb6ce5a9d21365a1d7c0a60554a6cb963e68cdf184dce10397c4979c6170defdf863c975ad4
- SSDEEP 768:rhySjyVpo8ZPA5e7lteMT+bj8kxFQkAY3qRuwYSum7mZUZwqb:r0SjUBAi/T+bRxFrAY3qRu/HUT
- TLSH T11003E1521D585EBEE2934E39C0D4B62BE8AD500CF11EB85747FF7C40518DA92CB132AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString WINWORD.EXE Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 WINWORD.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz WINWORD.EXE - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS WINWORD.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily WINWORD.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU WINWORD.EXE - Suspicious behavior: AddClipboardFormatListener 2 IoCs
pid Process 1540 WINWORD.EXE 1540 WINWORD.EXE - Suspicious use of SetWindowsHookEx 10 IoCs
pid Process 1540 WINWORD.EXE 1540 WINWORD.EXE 1540 WINWORD.EXE 1540 WINWORD.EXE 1540 WINWORD.EXE 1540 WINWORD.EXE 1540 WINWORD.EXE 1540 WINWORD.EXE 1540 WINWORD.EXE 1540 WINWORD.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Formularz-asortymentowo-cenowy-srodki-czystosci.odt"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1540
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
- Size 4KB
- SHA256 0300e9ddb527990e8b59d06e9ccf3ec2bd92d3bbd0ef4fba69d6336e4195e82d
- MD5 5f036f91e86e30f749961506951d51eb
- SHA1 acb87b59117c6e2db86f98c4c8bac52eade97cd4
- SHA512 341f250cf3764207b5328a12b31016c0750daddcd16722b4bcef502bcbef7ef379abb601649ee6c3fdf121f3d3cd6890c8a80e5dae3169fe56ef82af20631944
- SSDEEP 96:Dbonzjs6o1BXl7EV4/sClywa3UHimRkISatmQFjm:Dbsns6KXxUrClywawinLatvFjm
- TLSH T100A19E44A75AEB61C331EBB6829B7B51033B6D20178468FAEFDAA1E1695B44C143C3C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
- Size 342B
- SHA256 f461ec3f221276f7e6fa4dc0ab84f825d8340e5b05f87a074d1a1526f84168a0
- MD5 ff6a427ed3298127640726639e5fce2c
- SHA1 e4c133730d0d1c66c07e0163f9dc5504dd090820
- SHA512 51a7aa00c62e28fcb5a2bf239fb68ededbcfc7e92be0f3c7b5f9f4dc857494ae0deb3eea011e35d79d17c86e2de6e2da9df080d4548a1e46fd94abe6ba4c7e77
- TLSH T16EE017116AA84604E5770A3CA87366499976B76BAA02CADD0275008D1C25F62893272A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
- Size 342B
- SHA256 3305d5784e60be3787948aeb20404f8d0147ee42423d8fc1d507ee9c3b89b977
- MD5 f33d141c2a544f4695d908fc53ce2e8f
- SHA1 1277ac9b689b5c8e6fe019f7962e02838914261c
- SHA512 0270579e78ddd12018b982fde43a8ebf57a0c83f1309c8d6d45579a31fb34a8303fb8e9e7d1af9ca6875f42658a6dbe7826d58ba3be37ca48ea3bcaf1216d6f3
- TLSH T188E02E012BE80204F5730A3CA83361089937B33BAA01CACC0274008D4C21F62CC3271E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\TCDEC4A.tmp\iso690.xsl
- Size 263KB
- SHA256 3f925e0cc1542f09de1f99060899eafb0042bb9682507c907173c392115a44b5
- MD5 ff0e07eff1333cdf9fc2523d323dd654
- SHA1 77a1ae0dd8dbc3fee65dd6266f31e2a564d088a4
- SHA512 b4615f995fab87661c2dbe46625aa982215d7bde27cafae221dca76087fe76da4b4a381943436fcac1577cb3d260d0050b32b7b93e3eb07912494429f126bb3d
- SSDEEP 6144:JwprAiaR95vtfb8pDbgWPzDCvCmvQursq7vImej/yQ4SS1apSiQhHDOruvoVeMUX:We
- TLSH T1094469A5E6D9CF144BB1F23FD8A53092EA1DC87B29341D41F1DC733717AE948822B662
- MD5 SHA1 SHA512 SSDEEP TLSH