Analysis
- max time kernel
2s - max time network
161s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 00:36
Static task
static1
Behavioral task
behavioral1
Sample
attachment20260808-1169-9ize29.docx
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
attachment20260808-1169-9ize29.docx
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target attachment20260808-1169-9ize29.docx
- Size 104KB
- Sample260808-axxn4aep2x
- SHA256 4c5898e2bc707b9a6a067468a2c6f395f17e9fe3d4acf7379cf32551ecc45b15
- MD5 aa15fcf0964e4515c4931b5bf81f5229
- SHA1 9c8f674d95e1e518fbfe598dabd18a4bc0ca011b
- SHA512 4695c5e40f81fc580535418dadc189699ca1fe1b5fb43dbcef7f193766bfae43b2c58b934ebf191169e7803c6fb582783f8aab35b4d41afdb85db9510143f877
- SSDEEP 1536:JORhN+gPY3tH0bO6ZZAnXJzy3mCaIRgqzdS6JGQYwB1prxK:JOXNrbO6ZZchIPIS9B1pNK
- TLSH T192A395998D79600DD0773FB49BB5A494E771F6B23E4E4E2B02AC74742FAEC2997C1804
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 2 IoCs
pid Process 2776 WINWORD.EXE 2776 WINWORD.EXE - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2776 WINWORD.EXE 2776 WINWORD.EXE 2776 WINWORD.EXE 2776 WINWORD.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\attachment20260808-1169-9ize29.docx" /o ""1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:2776
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms
- Size 4KB
- SHA256 bd6dd615a6f21bcc333f89f49dd379afebf4403a16d4c134602efc6c57dbf619
- MD5 7d7e9ac94ea33dc1c24e1fec403ad54d
- SHA1 5decb1946e465d3f79f6ede413fecd8115dee087
- SHA512 782ae1a59247eda88e563645bfabe2d449acd09f737cf8753717097dde98be1727ae80f0ded2f02ff1cb89cf907c5702a634e540268c93153cc819a47019811b
- SSDEEP 96:UU1bUnZSDoRli/qCotiEBKwnICsUtkhR7MrORdbevDSrSURbozx1O1m:UUdUneAli9otiInZsUc7zdbQQUzXwm
- TLSH T1FA91F303CAAF7B1AD0A5437156258345DBB27E03F704572DA680A42FBE719206F9DB3E
- MD5 SHA1 SHA512 SSDEEP TLSH