Analysis

  • max time kernel
    127s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/07/2023, 21:39

General

  • Target

    Geometry Dash 2.11 Funcional/Resources/WorldSheet-uhd.xml

  • Size

    4KB

  • MD5

    c74c1e852172c86a28adea23add021c2

  • SHA1

    53fc5072c865f22ecbc0365f732d5880d3e05dda

  • SHA256

    4fff531675cd2fab608841853b3d31cbfbeb0788bb33c5f99456d8c421136a5f

  • SHA512

    a8713a6a31fb70a25b59521c598dba3e1af0bf7a05d696c65fc4204a2772de30ad327a47a54196f164a954a478c44e8001c69a41e3e8142c150d41f573045b43

  • SSDEEP

    96:/y+SYkKO4LmYkh1Xke6Yk/NPPSYYkMAOm2YkMsM0DYkRRNsaYkTJJkhrLXZtZo6Q:aFPp

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Geometry Dash 2.11 Funcional\Resources\WorldSheet-uhd.xml"
    1⤵
      PID:1380
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 1380 -s 472
        2⤵
        • Program crash
        PID:4724
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 408 -p 1380 -ip 1380
      1⤵
        PID:4892

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1380-134-0x00007FFD2B690000-0x00007FFD2B885000-memory.dmp

        Filesize

        2.0MB

      • memory/1380-133-0x00007FFCEB710000-0x00007FFCEB720000-memory.dmp

        Filesize

        64KB

      • memory/1380-135-0x00007FFD2B690000-0x00007FFD2B885000-memory.dmp

        Filesize

        2.0MB

      • memory/1380-136-0x00007FFD29140000-0x00007FFD29409000-memory.dmp

        Filesize

        2.8MB

      • memory/1380-137-0x00007FFCEB710000-0x00007FFCEB720000-memory.dmp

        Filesize

        64KB

      • memory/1380-138-0x00007FFD2B690000-0x00007FFD2B885000-memory.dmp

        Filesize

        2.0MB