Overview

overview

10

Static

static

7

Licenses/1...12.rtf

windows10-1703-x64

6

Licenses/1...12.rtf

windows10-1703-x64

1

Licenses/1...es.rtf

windows10-1703-x64

1

Licenses/1...ls.rtf

windows10-1703-x64

1

Licenses/1...ct.rtf

windows10-1703-x64

1

Licenses/1...rk.rtf

windows10-1703-x64

1

Licenses/1...ls.rtf

windows10-1703-x64

1

Licenses/1...ss.rtf

windows10-1703-x64

1

Licenses/1...R2.rtf

windows10-1703-x64

1

Licenses/1...DB.rtf

windows10-1703-x64

1

Licenses/1...LI.rtf

windows10-1703-x64

1

Licenses/1...ts.rtf

windows10-1703-x64

1

Licenses/1...ce.rtf

windows10-1703-x64

1

Licenses/1...ce.rtf

windows10-1703-x64

1

Licenses/1...om.rtf

windows10-1703-x64

1

Licenses/1...er.rtf

windows10-1703-x64

1

Licenses/s...se.rtf

windows10-1703-x64

1

Licenses/s...es.rtf

windows10-1703-x64

1

Setup.exe

windows10-1703-x64

10

Team Tools...es.dll

windows10-1703-x64

1

Team Tools...ge.exe

windows10-1703-x64

1

Team Tools...64.dll

windows10-1703-x64

1

Team Tools...10.dll

windows10-1703-x64

7

Team Tools...32.dll

windows10-1703-x64

1

Team Tools...10.dll

windows10-1703-x64

1

Team Tools...es.dll

windows10-1703-x64

1

Team Tools...UI.dll

windows10-1703-x64

1

Team Tools...ui.dll

windows10-1703-x64

1

Team Tools...ui.dll

windows10-1703-x64

1

Team Tools...ui.dll

windows10-1703-x64

1

Team Tools...ol.dll

windows10-1703-x64

1

Team Tools...er.dll

windows10-1703-x64

1

Analysis

  • max time kernel
    6s
  • max time network
    260s
  • platform
    windows10-1703_x64
  • resource
    win10-20240611-en
  • resource tags

    arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
  • submitted
    30-06-2024 22:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Licenses/sdk_third_party_notices.rtf

  • Size

    60KB

  • MD5

    111cfce947c70a8cfd05c5d3fbb04fe2

  • SHA1

    e1ae3970c6f3f7feb2fc2f42fdb899e12709a5a4

  • SHA256

    4d78ad682381dc3572b8dc12f11fc6ce571587fe3d5ea8caabe8ed1fc638c966

  • SHA512

    80dac8bb2c24ddddfd23ef6ef76b60d2bf8f8184232462bcc4261bab3254e5520a34c353bc86eead0510669bd36bf529e1bfedf5b144d235d7700d799aab44b5

  • SSDEEP

    1536:V7EpQ6FMA7JjYnCBBEBr9xdQPK+ucGaCcNYg53Z/f5MAd/3N4a78d/C1xn3qLe1n:VAppFMA7JjYnCBBEBr9xdQPK+ucGaCcn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Licenses\sdk_third_party_notices.rtf" /o ""
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:4900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TCD902B.tmp\sist02.xsl
    Filesize

    245KB

    MD5

    f883b260a8d67082ea895c14bf56dd56

    SHA1

    7954565c1f243d46ad3b1e2f1baf3281451fc14b

    SHA256

    ef4835db41a485b56c2ef0ff7094bc2350460573a686182bc45fd6613480e353

    SHA512

    d95924a499f32d9b4d9a7d298502181f9e9048c21dbe0496fa3c3279b263d6f7d594b859111a99b1a53bd248ee69b867d7b1768c42e1e40934e0b990f0ce051e

    Download Submit
  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms
    Filesize

    3KB

    MD5

    691660d0d402a9ef6cae20e84c7a81c1

    SHA1

    dce8cae010c0b72d3c98571c2184a11fedc5f110

    SHA256

    6ed70a6d7299491b9e28b5591d21291de0c493a35d120585d9125066c998cccb

    SHA512

    254c1239304935ee7bb252d9486ede3f26be81b852e7a99e7b3b052b71245d66371dd7b2a19e2bb0c5b9ddf2ad5f881e7d10a2b988ee93494e0fa3c2cf9ef498

    Download Submit
  • memory/4900-31-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-790-0x00007FF83F060000-0x00007FF83F070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/4900-5-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-10-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-12-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-15-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-16-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-14-0x00007FF83C510000-0x00007FF83C520000-memory.dmp
    Filesize

    64KB

    Download
  • memory/4900-13-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-18-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-17-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-19-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-20-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-34-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-11-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-24-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-27-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-30-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-788-0x00007FF83F060000-0x00007FF83F070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/4900-6-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-21-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-32-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-23-0x00007FF83C510000-0x00007FF83C520000-memory.dmp
    Filesize

    64KB

    Download
  • memory/4900-22-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-9-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-1-0x00007FF83F060000-0x00007FF83F070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/4900-3-0x00007FF83F060000-0x00007FF83F070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/4900-233-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-235-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-234-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-4-0x00007FF83F060000-0x00007FF83F070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/4900-241-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-2-0x00007FF87F075000-0x00007FF87F076000-memory.dmp
    Filesize

    4KB

    Download
  • memory/4900-33-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-792-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-791-0x00007FF87EFD0000-0x00007FF87F1AB000-memory.dmp
    Filesize

    1.9MB

    Download
  • memory/4900-789-0x00007FF83F060000-0x00007FF83F070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/4900-0-0x00007FF83F060000-0x00007FF83F070000-memory.dmp
    Filesize

    64KB

    Download
  • memory/4900-787-0x00007FF83F060000-0x00007FF83F070000-memory.dmp
    Filesize

    64KB

    Download