Analysis

  • max time kernel
    142s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/07/2023, 03:13

General

  • Target

    sticker_burger.xml

  • Size

    12KB

  • MD5

    c8dae564f4f7e19e4470d9b8a05deafa

  • SHA1

    8ec5a0a801578126c1f2a6049a20af7a28fa75ec

  • SHA256

    0718314beea0b292343ab7debdd77611c5ed50757f0a11fd9c6d62a6e56cd8f3

  • SHA512

    e5a017270c364aaeb41a4373ad6df0d076d351deeebf5b7d5a2b42ad3eedb028ef8adc9b30d9740a5cff646d839f640502874be4a72b3b9f0e5e7d5387bf1911

  • SSDEEP

    192:NL0GHZ2aWgaqtObzlKuxnxiH6DOYWexZwH2R39VcBha8pw0yWY:No5BYSKu9bDAexeH2NcO8e0M

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\sticker_burger.xml"
    1⤵
      PID:3760
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 3760 -s 472
        2⤵
        • Program crash
        PID:2556
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 408 -p 3760 -ip 3760
      1⤵
        PID:3996

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3760-133-0x00007FFBC9770000-0x00007FFBC9780000-memory.dmp

        Filesize

        64KB

      • memory/3760-134-0x00007FFC096F0000-0x00007FFC098E5000-memory.dmp

        Filesize

        2.0MB

      • memory/3760-135-0x00007FFC096F0000-0x00007FFC098E5000-memory.dmp

        Filesize

        2.0MB

      • memory/3760-136-0x00007FFC096F0000-0x00007FFC098E5000-memory.dmp

        Filesize

        2.0MB

      • memory/3760-137-0x00007FFC071A0000-0x00007FFC07469000-memory.dmp

        Filesize

        2.8MB

      • memory/3760-138-0x00007FFBC9770000-0x00007FFBC9780000-memory.dmp

        Filesize

        64KB

      • memory/3760-139-0x00007FFC096F0000-0x00007FFC098E5000-memory.dmp

        Filesize

        2.0MB