Analysis

  • max time kernel
    142s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-07-2023 15:58

General

  • Target

    default_shape_triangle.xml

  • Size

    565B

  • MD5

    89c3be1517c106f8777929c89462b9b5

  • SHA1

    42aaef047a9d0b2b831c4ea007a2ee8ec829b45b

  • SHA256

    c30dbce55577b2c831a5750af301547bac296c9f72317321115f8853354f3f1c

  • SHA512

    da6b3dfa996b154c472fed39ed3b18b3f7cfac011dc3243d189d2bdd09a2b022faaa4ca865941f47c800d9438cc17be1980dae60787fe741c12a5fb962cbcadd

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\default_shape_triangle.xml"
    1⤵
      PID:4128
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 4128 -s 448
        2⤵
        • Program crash
        PID:4604
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 424 -p 4128 -ip 4128
      1⤵
        PID:1304

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4128-134-0x00007FFF6A210000-0x00007FFF6A405000-memory.dmp

        Filesize

        2.0MB

      • memory/4128-133-0x00007FFF2A290000-0x00007FFF2A2A0000-memory.dmp

        Filesize

        64KB

      • memory/4128-135-0x00007FFF6A210000-0x00007FFF6A405000-memory.dmp

        Filesize

        2.0MB

      • memory/4128-136-0x00007FFF67E30000-0x00007FFF680F9000-memory.dmp

        Filesize

        2.8MB

      • memory/4128-137-0x00007FFF2A290000-0x00007FFF2A2A0000-memory.dmp

        Filesize

        64KB

      • memory/4128-138-0x00007FFF6A210000-0x00007FFF6A405000-memory.dmp

        Filesize

        2.0MB