Overview

overview

1

Static

static

1

2024-06-06...2.docx

windows10-2004-x64

1

2024-06-06...2.docx

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/11/2026, 12:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2024-06-06-Impartner-MSA-and-DPA-v2.docx
  • Size 146KB
  • Sample261102-pm2ydsfb32
  • SHA256 6e26077d1cd2b4fed7be26c9b6eefd72372b6c753642a6eb22816c049a0a35da
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 9 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Documents\2024-06-06-Impartner-MSA-and-DPA-v2.docx" /o ""
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:4512

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        iso690.xsl
        • Path C:\Users\Admin\AppData\Local\Temp\TCDD7E5.tmp\iso690.xsl
        • Size 263KB
        • SHA256 3f925e0cc1542f09de1f99060899eafb0042bb9682507c907173c392115a44b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD79F.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD79F.tmp
        • Size 28KB
        • SHA256 da2f261c3c82e229a097a9302c8580f014bb6442825db47c008da097cfce0ee4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7A0.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7A0.tmp
        • Size 45KB
        • SHA256 40e9af9284ff07fdb75c33a11a794f5333712baa4a6cf82fa529fbaf5ad0fed0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7A1.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7A1.tmp
        • Size 34KB
        • SHA256 23ccfb7206a8f77a13080998ec6ef95b59b3c3e12b72b2d2ad4e53b0b26bb8c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7A2.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7A2.tmp
        • Size 20KB
        • SHA256 6b1633dd765a11e7ed26f8f9a4dd45023b3e4adb903c934df3917d07a3856bff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7A3.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7A3.tmp
        • Size 30KB
        • SHA256 cebe759bc4509700e3d23c6a5df8d889132a60ebc92260a74947eaa1089e2789
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7A4.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7A4.tmp
        • Size 21KB
        • SHA256 5c70dd1551eb8b9b13efafeeaf70f08b307e110caee75ad9908a6a42bbccb07e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7B5.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7B5.tmp
        • Size 34KB
        • SHA256 9e46b8ba0bad6e534af33015c86396c33c5088d3ae5389217a5e90ba68252374
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7B6.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7B6.tmp
        • Size 32KB
        • SHA256 df3fff163924d08517b41455f2d06788ba4e49c68337d15ecf329be48cf7da2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7B7.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7B7.tmp
        • Size 18KB
        • SHA256 e3be3f1e341c0fa5e9cb79e2739cf0565c6ea6c189ea3e53acf04320459a7070
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7B8.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7B8.tmp
        • Size 30KB
        • SHA256 7e1a90cdb2ba7f03abcb4687f0931858bf57e13552e0e4e54ec69a27325011ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7B9.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7B9.tmp
        • Size 30KB
        • SHA256 e0100320a4f63e07c77138a89ea24a1cbd69784a89fe3bf83e35576114b4ce02
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7BA.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7BA.tmp
        • Size 30KB
        • SHA256 d250eb1f93b43efb7654b831b4183c9caec2d12d4efee8607fee70b9fab20730
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7BB.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7BB.tmp
        • Size 31KB
        • SHA256 5d13f9907ac381d19f0a7552fd6d9fc07c9bd42c0f9ce017fff75587e1890375
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7BC.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7BC.tmp
        • Size 30KB
        • SHA256 434576eb1a16c2d14d666a33edde76717c896d79f45df56742afd90acb9f21ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7BD.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7BD.tmp
        • Size 30KB
        • SHA256 8077c92c66d15d7e03fbff3a48bd9576b80f698a36a44316eaba81ee8043b673
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7CD.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7CD.tmp
        • Size 20KB
        • SHA256 1cf5c2d0f6188ffff117932c424cc55d1459e0852564c09d7779263abd116118
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7DE.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7DE.tmp
        • Size 21KB
        • SHA256 773ac516c9b9b28058128ec9be099f817f3f90211ac70dc68077599929683d6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD7FE.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD7FE.tmp
        • Size 42KB
        • SHA256 6f8ffb225f3b8c7ade31a17a02f941fc534e4f7b5ee678b21cd9060282034701
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabD9D6.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabD9D6.tmp
        • Size 2.4MB
        • SHA256 ad26761d59f1fa9783c2f49184a2e8fe55fcd46cd3c49ffc099c02310649dc67
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cabDC2A.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\cabDC2A.tmp
        • Size 32KB
        • SHA256 3c6f66790c543d4e9d8e0e6f476b1acadf0a5fcdd561b8484d8dddadfdf8134b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        index.dat
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat
        • Size 320B
        • SHA256 f99f0d5b1a4dca3b963bbb3a8c425d36c4c4f0ed6b77431fb30d8acb7920e78b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        CUSTOM.DIC
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512
        Submit Download

        CUSTOM.DIC
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
        • Size 16B
        • SHA256 a91a702aab9b8dd722843d3d208a21bcfa6556dfc64e2ded63975de4511eb866
        • MD5 SHA1 SHA512
        Submit Download

        CE84IDGD8XG1B6LPZENB.temp
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\CE84IDGD8XG1B6LPZENB.temp
        • Size 1KB
        • SHA256 45fe771616b5873c4103ca6cdca8bacb00eb0bdb65e0c91a17216f34a164e59c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        K6MPPAB3ZMI6ASZMAI0Q.temp
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\K6MPPAB3ZMI6ASZMAI0Q.temp
        • Size 1KB
        • SHA256 0eb0da6e2682fd7780b3827ed94e8e610fdc797e4853b96ea2892771e9cbb701
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/4512-9-0x00007FFE551D0000-0x00007FFE551E0000-memory.dmp
        Download

        memory/4512-8-0x00007FFE551D0000-0x00007FFE551E0000-memory.dmp
        Download

        memory/4512-7-0x00007FFE57B30000-0x00007FFE57B40000-memory.dmp
        Download

        memory/4512-4-0x00007FFE57B30000-0x00007FFE57B40000-memory.dmp
        Download

        memory/4512-6-0x00007FFE97AB0000-0x00007FFE97CA5000-memory.dmp
        Download

        memory/4512-5-0x00007FFE97AB0000-0x00007FFE97CA5000-memory.dmp
        Download

        memory/4512-0-0x00007FFE57B30000-0x00007FFE57B40000-memory.dmp
        Download

        memory/4512-2-0x00007FFE57B30000-0x00007FFE57B40000-memory.dmp
        Download

        memory/4512-1-0x00007FFE57B30000-0x00007FFE57B40000-memory.dmp
        Download

        memory/4512-3-0x00007FFE97B4D000-0x00007FFE97B4E000-memory.dmp
        Download

        memory/4512-39-0x00007FFE97AB0000-0x00007FFE97CA5000-memory.dmp
        Download