Analysis
-
max time kernel
112s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
07-08-2023 17:45
General
-
Target
billing-ce-cp/.svn/pristine/19/192571290a9ffa871fe23122edddfab634c61ae7.xml
-
Size
6KB
-
MD5
f8c792af2f74494eb07c2c43ad66d182
-
SHA1
192571290a9ffa871fe23122edddfab634c61ae7
-
SHA256
c4836fb84dda2b02af7c7cab0bab826bb5f9c16c385055df95db4c2eea081bb9
-
SHA512
da2d9cafb55e36ecc4000087542fe080a4069e65ce76473b6beefabf3cc5853184cd5c8007f16b9b7224cd6fdb0cccc37ccf979eb3f1166dd2c1b80aecb15e01
-
SSDEEP
192:2PR/OboOPsmib25ETzZhpRfLP6GMGvSO7y7NyizAjAUcr9OEYpqnC3uVT:2PAbo+smib25EHZhPfT6GbvSWy7QOAjy
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\billing-ce-cp\.svn\pristine\19\192571290a9ffa871fe23122edddfab634c61ae7.xml"1⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4588 -s 4482⤵
- Program crash
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 412 -p 4588 -ip 45881⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4588-134-0x00007FFCAAEF0000-0x00007FFCAB0E5000-memory.dmpFilesize
2.0MB
-
memory/4588-133-0x00007FFC6AF70000-0x00007FFC6AF80000-memory.dmpFilesize
64KB
-
memory/4588-135-0x00007FFCAAEF0000-0x00007FFCAB0E5000-memory.dmpFilesize
2.0MB
-
memory/4588-136-0x00007FFCA8BE0000-0x00007FFCA8EA9000-memory.dmpFilesize
2.8MB
-
memory/4588-137-0x00007FFC6AF70000-0x00007FFC6AF80000-memory.dmpFilesize
64KB
-
memory/4588-138-0x00007FFCAAEF0000-0x00007FFCAB0E5000-memory.dmpFilesize
2.0MB