Analysis

  • max time kernel
    148s
  • max time network
    133s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/10/2026, 06:20

General

  • Target
    δ1_υπ10_καλοκαίρι.docx
  • Size 97KB
  • Sample261020-g3s2eswtew
  • SHA256 fc871bd916d17c4c508b793c607db0a55a65a1afefe2608520fd439e22f88921
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Documents\δ1_υπ10_καλοκαίρι.docx" /o ""
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:2616

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        sist02.xsl

        • Path C:\Users\Admin\AppData\Local\Temp\TCDB65B.tmp\sist02.xsl
        • Size 245KB
        • SHA256 ef4835db41a485b56c2ef0ff7094bc2350460573a686182bc45fd6613480e353
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB5C4.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB5C4.tmp
        • Size 32KB
        • SHA256 3c6f66790c543d4e9d8e0e6f476b1acadf0a5fcdd561b8484d8dddadfdf8134b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB5D5.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB5D5.tmp
        • Size 30KB
        • SHA256 434576eb1a16c2d14d666a33edde76717c896d79f45df56742afd90acb9f21ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB605.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB605.tmp
        • Size 28KB
        • SHA256 da2f261c3c82e229a097a9302c8580f014bb6442825db47c008da097cfce0ee4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB606.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB606.tmp
        • Size 34KB
        • SHA256 9e46b8ba0bad6e534af33015c86396c33c5088d3ae5389217a5e90ba68252374
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB617.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB617.tmp
        • Size 34KB
        • SHA256 23ccfb7206a8f77a13080998ec6ef95b59b3c3e12b72b2d2ad4e53b0b26bb8c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB627.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB627.tmp
        • Size 32KB
        • SHA256 df3fff163924d08517b41455f2d06788ba4e49c68337d15ecf329be48cf7da2d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB628.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB628.tmp
        • Size 30KB
        • SHA256 7e1a90cdb2ba7f03abcb4687f0931858bf57e13552e0e4e54ec69a27325011ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB65E.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB65E.tmp
        • Size 30KB
        • SHA256 8077c92c66d15d7e03fbff3a48bd9576b80f698a36a44316eaba81ee8043b673
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB6AF.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB6AF.tmp
        • Size 45KB
        • SHA256 40e9af9284ff07fdb75c33a11a794f5333712baa4a6cf82fa529fbaf5ad0fed0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB6CF.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB6CF.tmp
        • Size 30KB
        • SHA256 cebe759bc4509700e3d23c6a5df8d889132a60ebc92260a74947eaa1089e2789
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB6F2.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB6F2.tmp
        • Size 30KB
        • SHA256 e0100320a4f63e07c77138a89ea24a1cbd69784a89fe3bf83e35576114b4ce02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB702.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB702.tmp
        • Size 31KB
        • SHA256 5d13f9907ac381d19f0a7552fd6d9fc07c9bd42c0f9ce017fff75587e1890375
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB703.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB703.tmp
        • Size 30KB
        • SHA256 d250eb1f93b43efb7654b831b4183c9caec2d12d4efee8607fee70b9fab20730
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cabB704.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\cabB704.tmp
        • Size 22KB
        • SHA256 345aa5ca2496f975b7e33c182d5e57377f8b740f23e9a55f4b2b446723947b72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.dat

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat
        • Size 360B
        • SHA256 77a62faffb3da18d1fb45317663e47eced62a6fc05cec8d51dc7ba4fa2971b94
        • MD5 SHA1 SHA512 TLSH

        CUSTOM.DIC

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
        • Size 16B
        • SHA256 a91a702aab9b8dd722843d3d208a21bcfa6556dfc64e2ded63975de4511eb866
        • MD5 SHA1 SHA512

        RDZCEU2RAL2BNP4F76Y7.temp

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RDZCEU2RAL2BNP4F76Y7.temp
        • Size 2KB
        • SHA256 87b6fc61da6d2da323cc0f72beaabac9b9dfd3824d3142a16144a407c4867241
        • MD5 SHA1 SHA512 TLSH

        XSD4K53DXIC6HENN7QBV.temp

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XSD4K53DXIC6HENN7QBV.temp
        • Size 1KB
        • SHA256 dddf4d4c67317d4d3a42df8ea8969ec67a620584c4f56482680351fe4b778cb0
        • MD5 SHA1 SHA512 TLSH

        memory/2616-12-0x00007FFE9C840000-0x00007FFE9CAA3000-memory.dmp

        memory/2616-6-0x00007FFE9C840000-0x00007FFE9CAA3000-memory.dmp

        memory/2616-17-0x00007FFE5A610000-0x00007FFE5A620000-memory.dmp

        memory/2616-16-0x00007FFE9C840000-0x00007FFE9CAA3000-memory.dmp

        memory/2616-15-0x00007FFE9C840000-0x00007FFE9CAA3000-memory.dmp

        memory/2616-14-0x00007FFE9C840000-0x00007FFE9CAA3000-memory.dmp

        memory/2616-13-0x00007FFE5A610000-0x00007FFE5A620000-memory.dmp

        memory/2616-5-0x00007FFE5C980000-0x00007FFE5C990000-memory.dmp

        memory/2616-10-0x00007FFE9C840000-0x00007FFE9CAA3000-memory.dmp

        memory/2616-2-0x00007FFE5C980000-0x00007FFE5C990000-memory.dmp

        memory/2616-11-0x00007FFE9C840000-0x00007FFE9CAA3000-memory.dmp

        memory/2616-49-0x00007FFE9C840000-0x00007FFE9CAA3000-memory.dmp

        memory/2616-9-0x00007FFE9C840000-0x00007FFE9CAA3000-memory.dmp

        memory/2616-8-0x00007FFE9C840000-0x00007FFE9CAA3000-memory.dmp

        memory/2616-7-0x00007FFE9C840000-0x00007FFE9CAA3000-memory.dmp

        memory/2616-0-0x00007FFE5C980000-0x00007FFE5C990000-memory.dmp

        memory/2616-1-0x00007FFE5C980000-0x00007FFE5C990000-memory.dmp

        memory/2616-4-0x00007FFE5C980000-0x00007FFE5C990000-memory.dmp

        memory/2616-3-0x00007FFE9C99F000-0x00007FFE9C9A0000-memory.dmp

        memory/2616-196-0x00007FFE5C980000-0x00007FFE5C990000-memory.dmp

        memory/2616-197-0x00007FFE5C980000-0x00007FFE5C990000-memory.dmp

        memory/2616-198-0x00007FFE5C980000-0x00007FFE5C990000-memory.dmp

        memory/2616-199-0x00007FFE5C980000-0x00007FFE5C990000-memory.dmp

        memory/2616-200-0x00007FFE9C840000-0x00007FFE9CAA3000-memory.dmp