Analysis

  • max time kernel
    117s
  • max time network
    205s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/07/2023, 20:51

General

  • Target

    GD/Resources/CCControlColourPickerSpriteSheet-hd.xml

  • Size

    5KB

  • MD5

    77ce7c2080d0f2ac65c42cfa4ef631c6

  • SHA1

    9a6fb0127fb661d519cba5868b60835617859180

  • SHA256

    980f92d2867c93f2b6f43bcb6aa05647e7545562055b51edd7eda38a3f6e5dc0

  • SHA512

    255abd0ba5c467ecf79a2dd90fe6768ac0b32a7896ded83f6d79ccea46e20b1ce32224d977ac333df6f96df2fadd711374bc8d6307983a90550855422cb83f12

  • SSDEEP

    96:/y+VHP5/QO5nNHQWI/QOj9kuH7I/QOj9ksHMCmI/QOj9kvHE/QOOiHc5/QORnHz1:aYb06E06D06d902VD

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\GD\Resources\CCControlColourPickerSpriteSheet-hd.xml"
    1⤵
      PID:2396
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 2396 -s 448
        2⤵
        • Program crash
        PID:1380
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 460 -p 2396 -ip 2396
      1⤵
        PID:64

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2396-136-0x00007FFA35A90000-0x00007FFA35AA0000-memory.dmp

        Filesize

        64KB

      • memory/2396-137-0x00007FFA75A10000-0x00007FFA75C05000-memory.dmp

        Filesize

        2.0MB

      • memory/2396-138-0x00007FFA75A10000-0x00007FFA75C05000-memory.dmp

        Filesize

        2.0MB

      • memory/2396-139-0x00007FFA73290000-0x00007FFA73559000-memory.dmp

        Filesize

        2.8MB

      • memory/2396-140-0x00007FFA35A90000-0x00007FFA35AA0000-memory.dmp

        Filesize

        64KB

      • memory/2396-141-0x00007FFA75A10000-0x00007FFA75C05000-memory.dmp

        Filesize

        2.0MB