Overview

overview

10

Static

static

7

Licenses/1...12.rtf

windows10-1703-x64

6

Licenses/1...12.rtf

windows10-1703-x64

1

Licenses/1...es.rtf

windows10-1703-x64

1

Licenses/1...ls.rtf

windows10-1703-x64

1

Licenses/1...ct.rtf

windows10-1703-x64

1

Licenses/1...rk.rtf

windows10-1703-x64

1

Licenses/1...ls.rtf

windows10-1703-x64

1

Licenses/1...ss.rtf

windows10-1703-x64

1

Licenses/1...R2.rtf

windows10-1703-x64

1

Licenses/1...DB.rtf

windows10-1703-x64

1

Licenses/1...LI.rtf

windows10-1703-x64

1

Licenses/1...ts.rtf

windows10-1703-x64

1

Licenses/1...ce.rtf

windows10-1703-x64

1

Licenses/1...ce.rtf

windows10-1703-x64

1

Licenses/1...om.rtf

windows10-1703-x64

1

Licenses/1...er.rtf

windows10-1703-x64

1

Licenses/s...se.rtf

windows10-1703-x64

1

Licenses/s...es.rtf

windows10-1703-x64

1

Setup.exe

windows10-1703-x64

10

Team Tools...es.dll

windows10-1703-x64

1

Team Tools...ge.exe

windows10-1703-x64

1

Team Tools...64.dll

windows10-1703-x64

1

Team Tools...10.dll

windows10-1703-x64

7

Team Tools...32.dll

windows10-1703-x64

1

Team Tools...10.dll

windows10-1703-x64

1

Team Tools...es.dll

windows10-1703-x64

1

Team Tools...UI.dll

windows10-1703-x64

1

Team Tools...ui.dll

windows10-1703-x64

1

Team Tools...ui.dll

windows10-1703-x64

1

Team Tools...ui.dll

windows10-1703-x64

1

Team Tools...ol.dll

windows10-1703-x64

1

Team Tools...er.dll

windows10-1703-x64

1

Analysis

  • max time kernel
    6s
  • max time network
    261s
  • platform
    windows10-1703_x64
  • resource
    win10-20240611-en
  • resource tags

    arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
  • submitted
    30-06-2024 22:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Licenses/1049/SQLServerNativeCLI.rtf

  • Size

    36KB

  • MD5

    967260c6874be8065eaaf1e77c3e9aec

  • SHA1

    f1635a1570ccb98c49971455c5f7a81a70ddb284

  • SHA256

    5dbf184fc60f7dba8d1dc2bd6982436472858417767aa0a4b8db93c008139233

  • SHA512

    7ecb38a13e1395bee006a78f138cd65d848e311872136630e6c71e99f5315a1184d3c921320e27d7139c6faa4babf8401be0929ef3d882c1a9d1ea87c44a2e4e

  • SSDEEP

    768:y/J7n5/nsZMV1xpQDF5f7x8LdlmrVmQWYzh+:Obmr8QWYzI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Licenses\1049\SQLServerNativeCLI.rtf" /o ""
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:1060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851218[[fn=gb]].xsl
    Filesize

    262KB

    MD5

    51d32ee5bc7ab811041f799652d26e04

    SHA1

    412193006aa3ef19e0a57e16acf86b830993024a

    SHA256

    6230814bf5b2d554397580613e20681752240ab87fd354ececf188c1eabe0e97

    SHA512

    5fc5d889b0c8e5ef464b76f0c4c9e61bda59b2d1205ac9417cc74d6e9f989fb73d78b4eb3044a1a1e1f2c00ce1ca1bd6d4d07eeadc4108c7b124867711c31810

    Download Submit
  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms
    Filesize

    3KB

    MD5

    742dd48925f93c9051b3f3d4eb7f0a2c

    SHA1

    2dfdf6b743af18f0bb7503b6ddc3df83b243f31b

    SHA256

    3050682ce306fe583b42ec40be26df6705ae05c14794d4bd5f404d16f9bd3c86

    SHA512

    fa5f790136cd06a1a296237211b2aabacbd2274acc9bb5aaacfc6a9a6bcb8c99649f299115f52aae4f4514407c5aa41ea92d77c6afe100fce3ef786be5ce081e

    Download Submit
  • memory/1060-16-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-27-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-13-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-18-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-20-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-22-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-26-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-15-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-29-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-30-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-31-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-32-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-0-0x00007FF8C9650000-0x00007FF8C9660000-memory.dmp
    Filesize

    64KB

    Download
  • memory/1060-24-0x00007FF8C5B40000-0x00007FF8C5B50000-memory.dmp
    Filesize

    64KB

    Download
  • memory/1060-33-0x00007FF8C5B40000-0x00007FF8C5B50000-memory.dmp
    Filesize

    64KB

    Download
  • memory/1060-25-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-23-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-21-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-19-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-17-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-28-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-11-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-14-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-12-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-7-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-5-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-4-0x00007FF8C9650000-0x00007FF8C9660000-memory.dmp
    Filesize

    64KB

    Download
  • memory/1060-3-0x00007FF8C9650000-0x00007FF8C9660000-memory.dmp
    Filesize

    64KB

    Download
  • memory/1060-2-0x00007FF8C9650000-0x00007FF8C9660000-memory.dmp
    Filesize

    64KB

    Download
  • memory/1060-1-0x00007FF909665000-0x00007FF909666000-memory.dmp
    Filesize

    4KB

    Download
  • memory/1060-8-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-212-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-214-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-213-0x00007FF909665000-0x00007FF909666000-memory.dmp
    Filesize

    4KB

    Download
  • memory/1060-215-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-6-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-767-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-766-0x00007FF9095C0000-0x00007FF90979B000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/1060-765-0x00007FF8C9650000-0x00007FF8C9660000-memory.dmp
    Filesize

    64KB

    Download
  • memory/1060-764-0x00007FF8C9650000-0x00007FF8C9660000-memory.dmp
    Filesize

    64KB

    Download
  • memory/1060-763-0x00007FF8C9650000-0x00007FF8C9660000-memory.dmp
    Filesize

    64KB

    Download
  • memory/1060-762-0x00007FF8C9650000-0x00007FF8C9660000-memory.dmp
    Filesize

    64KB

    Download