Analysis

  • max time kernel
    0s
  • max time network
    23s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/09/2026, 20:02

General

  • Target
    attachment20260907-1106-3r8qtx.docx
  • Size 193KB
  • Sample260907-yr4gfsfp21
  • SHA256 1b6774b78b67aa3dcf1d078dc00b8a4439ef41a1eae6cbd8de6e03416e5070cc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\attachment20260907-1106-3r8qtx.docx" /o ""
    1⤵
      PID:5052

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          iso690.xsl

          • Path C:\Users\Admin\AppData\Local\Temp\TCDFA2E.tmp\iso690.xsl
          • Size 263KB
          • SHA256 3f925e0cc1542f09de1f99060899eafb0042bb9682507c907173c392115a44b5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ExcludeDictionaryEN0409.lex

          • Path C:\Users\Admin\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex
          • Size 2B
          • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
          • MD5 SHA1 SHA512

          fb3b0dbfee58fac8.customDestinations-ms

          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms
          • Size 1KB
          • SHA256 4ca979543d0dbea6071b3ee5478ce62b0b090ab92768a451e224682eaf058746
          • MD5 SHA1 SHA512 TLSH

          memory/5052-6-0x00007FF957D80000-0x00007FF957FE3000-memory.dmp

          memory/5052-14-0x00007FF915190000-0x00007FF9151A0000-memory.dmp

          memory/5052-1-0x00007FF917EC0000-0x00007FF917ED0000-memory.dmp

          memory/5052-0-0x00007FF917EC0000-0x00007FF917ED0000-memory.dmp

          memory/5052-7-0x00007FF917EC0000-0x00007FF917ED0000-memory.dmp

          memory/5052-8-0x00007FF957D80000-0x00007FF957FE3000-memory.dmp

          memory/5052-10-0x00007FF957D80000-0x00007FF957FE3000-memory.dmp

          memory/5052-11-0x00007FF957D80000-0x00007FF957FE3000-memory.dmp

          memory/5052-13-0x00007FF915190000-0x00007FF9151A0000-memory.dmp

          memory/5052-12-0x00007FF957D80000-0x00007FF957FE3000-memory.dmp

          memory/5052-9-0x00007FF957D80000-0x00007FF957FE3000-memory.dmp

          memory/5052-5-0x00007FF957D80000-0x00007FF957FE3000-memory.dmp

          memory/5052-15-0x00007FF957D80000-0x00007FF957FE3000-memory.dmp

          memory/5052-4-0x00007FF917EC0000-0x00007FF917ED0000-memory.dmp

          memory/5052-34-0x00007FF957D80000-0x00007FF957FE3000-memory.dmp

          memory/5052-2-0x00007FF917EC0000-0x00007FF917ED0000-memory.dmp

          memory/5052-40-0x00007FF957D80000-0x00007FF957FE3000-memory.dmp

          memory/5052-3-0x00007FF957EDF000-0x00007FF957EE0000-memory.dmp

          memory/5052-440-0x00007FF917EC0000-0x00007FF917ED0000-memory.dmp

          memory/5052-444-0x00007FF957D80000-0x00007FF957FE3000-memory.dmp

          memory/5052-443-0x00007FF917EC0000-0x00007FF917ED0000-memory.dmp

          memory/5052-442-0x00007FF917EC0000-0x00007FF917ED0000-memory.dmp

          memory/5052-441-0x00007FF917EC0000-0x00007FF917ED0000-memory.dmp