Analysis
- max time kernel
1s - max time network
117s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/08/2026, 01:04
Static task
static1
Behavioral task
behavioral1
Sample
attachment20260813-1169-t0m8c7.docx
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
attachment20260813-1169-t0m8c7.docx
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target attachment20260813-1169-t0m8c7.docx
- Size 104KB
- Sample260813-bex3kshj7y
- SHA256 4c5898e2bc707b9a6a067468a2c6f395f17e9fe3d4acf7379cf32551ecc45b15
- MD5 aa15fcf0964e4515c4931b5bf81f5229
- SHA1 9c8f674d95e1e518fbfe598dabd18a4bc0ca011b
- SHA512 4695c5e40f81fc580535418dadc189699ca1fe1b5fb43dbcef7f193766bfae43b2c58b934ebf191169e7803c6fb582783f8aab35b4d41afdb85db9510143f877
- SSDEEP 1536:JORhN+gPY3tH0bO6ZZAnXJzy3mCaIRgqzdS6JGQYwB1prxK:JOXNrbO6ZZchIPIS9B1pNK
- TLSH T192A395998D79600DD0773FB49BB5A494E771F6B23E4E4E2B02AC74742FAEC2997C1804
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3360 WINWORD.EXE - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3360 WINWORD.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\attachment20260813-1169-t0m8c7.docx" /o ""1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:3360
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\TCDC810.tmp\sist02.xsl
- Size 245KB
- SHA256 ef4835db41a485b56c2ef0ff7094bc2350460573a686182bc45fd6613480e353
- MD5 f883b260a8d67082ea895c14bf56dd56
- SHA1 7954565c1f243d46ad3b1e2f1baf3281451fc14b
- SHA512 d95924a499f32d9b4d9a7d298502181f9e9048c21dbe0496fa3c3279b263d6f7d594b859111a99b1a53bd248ee69b867d7b1768c42e1e40934e0b990f0ce051e
- SSDEEP 6144:JwprA6OS95vtfb8p4bgWPzkhUh9I5/oBRSifJeg/yQzvapSiQhHZeruvoXMUw3im:uP
- TLSH T15B346895A6DACF144B71F23FD8B53492EA1DC87B29342D41F1DC733717AE948822B622
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms
- Size 1KB
- SHA256 cfeb4179a9e2cb5b66920081be61544b18ec4057f80b1343553bb9f59e882684
- MD5 63479a2aea64a324f5c3152631e8bd91
- SHA1 78bfe15d24e0370b78f04cbc898b999d9e4e8b40
- SHA512 e2ea776d5f2bfaf8dc8827923876ed557b082f4d0cd04edee64bde667cea5a3c2e6ad4cdeac21a8e8740d7cd731e1ab4404c1864c88dfd59ac1e6ce39bbb5481
- TLSH T13F41DA014ABB2F5AF0914336237FC346C2707A43B364922F6640665B1E79990DE4DB3E
- MD5 SHA1 SHA512 TLSH