Analysis

  • max time kernel
    1s
  • max time network
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    21/08/2026, 10:38

General

  • Target
    attachment20260821-201340-10cw4l.docx
  • Size 193KB
  • Sample260821-mpdbpscp3x
  • SHA256 1b6774b78b67aa3dcf1d078dc00b8a4439ef41a1eae6cbd8de6e03416e5070cc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\attachment20260821-201340-10cw4l.docx" /o ""
    1⤵
      PID:5952

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          gb.xsl

          • Path C:\Users\Admin\AppData\Local\Temp\TCDE12C.tmp\gb.xsl
          • Size 262KB
          • SHA256 6230814bf5b2d554397580613e20681752240ab87fd354ececf188c1eabe0e97
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ExcludeDictionaryEN0409.lex

          • Path C:\Users\Admin\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex
          • Size 2B
          • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
          • MD5 SHA1 SHA512

          memory/5952-6-0x00007FFE0A740000-0x00007FFE0A750000-memory.dmp

          memory/5952-9-0x00007FFE4A600000-0x00007FFE4A863000-memory.dmp

          memory/5952-4-0x00007FFE0A740000-0x00007FFE0A750000-memory.dmp

          memory/5952-7-0x00007FFE4A600000-0x00007FFE4A863000-memory.dmp

          memory/5952-0-0x00007FFE0A740000-0x00007FFE0A750000-memory.dmp

          memory/5952-5-0x00007FFE4A600000-0x00007FFE4A863000-memory.dmp

          memory/5952-8-0x00007FFE4A600000-0x00007FFE4A863000-memory.dmp

          memory/5952-11-0x00007FFE4A600000-0x00007FFE4A863000-memory.dmp

          memory/5952-10-0x00007FFE4A600000-0x00007FFE4A863000-memory.dmp

          memory/5952-13-0x00007FFE4A600000-0x00007FFE4A863000-memory.dmp

          memory/5952-1-0x00007FFE0A740000-0x00007FFE0A750000-memory.dmp

          memory/5952-12-0x00007FFE07AC0000-0x00007FFE07AD0000-memory.dmp

          memory/5952-3-0x00007FFE4A75F000-0x00007FFE4A760000-memory.dmp

          memory/5952-15-0x00007FFE4A600000-0x00007FFE4A863000-memory.dmp

          memory/5952-17-0x00007FFE4A600000-0x00007FFE4A863000-memory.dmp

          memory/5952-16-0x00007FFE07AC0000-0x00007FFE07AD0000-memory.dmp

          memory/5952-14-0x00007FFE4A600000-0x00007FFE4A863000-memory.dmp

          memory/5952-29-0x00007FFE4A600000-0x00007FFE4A863000-memory.dmp

          memory/5952-2-0x00007FFE0A740000-0x00007FFE0A750000-memory.dmp

          memory/5952-480-0x00007FFE4A600000-0x00007FFE4A863000-memory.dmp

          memory/5952-479-0x00007FFE0A740000-0x00007FFE0A750000-memory.dmp

          memory/5952-478-0x00007FFE0A740000-0x00007FFE0A750000-memory.dmp

          memory/5952-477-0x00007FFE0A740000-0x00007FFE0A750000-memory.dmp

          memory/5952-476-0x00007FFE0A740000-0x00007FFE0A750000-memory.dmp