Resubmissions

23-06-2024 19:34

240623-yac8yazcph 3

23-06-2024 19:33

240623-x9rd6szcne 10

23-06-2024 19:32

240623-x895wstbkr 10

Analysis

  • max time kernel
    51s
  • max time network
    51s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-06-2024 19:32

General

  • Target

    Loader/mconfig/config.xml

  • Size

    25KB

  • MD5

    f34b330f20dce1bdcce9058fca287099

  • SHA1

    936520d5bb5c00a1985d7a4c4f0ef763a9031862

  • SHA256

    0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d

  • SHA512

    d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd

  • SSDEEP

    192:Bt074zTxASaKp3T7pJsPpPT8B13eeaVonGdEBMmhVbeyeTfWDBzmAwdavahmhNIa:LAMDp35JyPCCu96yJwgag

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Loader\mconfig\config.xml"
    1⤵
      PID:3664

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3664-0-0x00007FFE01AB0000-0x00007FFE01AC0000-memory.dmp
      Filesize

      64KB

    • memory/3664-1-0x00007FFE41ACD000-0x00007FFE41ACE000-memory.dmp
      Filesize

      4KB

    • memory/3664-2-0x00007FFE41A30000-0x00007FFE41C25000-memory.dmp
      Filesize

      2.0MB

    • memory/3664-3-0x00007FFE41A30000-0x00007FFE41C25000-memory.dmp
      Filesize

      2.0MB