Analysis

  • max time kernel
    137s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-07-2023 15:58

General

  • Target

    default_shape_circle.xml

  • Size

    621B

  • MD5

    74d73099ae2a0e53764290c42496b48e

  • SHA1

    dd9675cc9771b06a9df6278f476fbf8d11c45ce2

  • SHA256

    28ed3f79e4b79171851f2415b22fe7411b778e5a819d80fc903d794fca58e363

  • SHA512

    a143c037ed878f862d028add206bb3d61baf4eb5486c0907bc41bfc5ef0fc30a49878e662369ea97a3d6ed4215f507ac304220c53291f2527f613e5cc82c2b4d

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\default_shape_circle.xml"
    1⤵
      PID:1440
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 1440 -s 440
        2⤵
        • Program crash
        PID:2368
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 408 -p 1440 -ip 1440
      1⤵
        PID:3076

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1440-133-0x00007FF8358B0000-0x00007FF8358C0000-memory.dmp

        Filesize

        64KB

      • memory/1440-134-0x00007FF875830000-0x00007FF875A25000-memory.dmp

        Filesize

        2.0MB

      • memory/1440-135-0x00007FF875830000-0x00007FF875A25000-memory.dmp

        Filesize

        2.0MB

      • memory/1440-137-0x00007FF8358B0000-0x00007FF8358C0000-memory.dmp

        Filesize

        64KB

      • memory/1440-136-0x00007FF873240000-0x00007FF873509000-memory.dmp

        Filesize

        2.8MB

      • memory/1440-138-0x00007FF875830000-0x00007FF875A25000-memory.dmp

        Filesize

        2.0MB