Analysis

  • max time kernel
    138s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-08-2023 04:44

General

  • Target

    ic_content_sticker_location_black.xml

  • Size

    1KB

  • MD5

    fb77f4f57cfc4c4a6016d10c56e879d9

  • SHA1

    d98ed1a853a61e722f35525e47b16616d5b56fce

  • SHA256

    c6f4e62c0d25cc789058a5563bcc546bd10f492f2e95fa5cd3824951680f1b1b

  • SHA512

    78ec21798b9adca5822ac03446a8e66017281c6767d99114e524c57952942c745699e58e3228441e54ba42654f91156ee5a26fd8025afbe4e5543e053d63f627

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\ic_content_sticker_location_black.xml"
    1⤵
      PID:4148
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 4148 -s 448
        2⤵
        • Program crash
        PID:3840
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 408 -p 4148 -ip 4148
      1⤵
        PID:1976

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4148-1-0x00007FF91D6F0000-0x00007FF91D8E5000-memory.dmp

        Filesize

        2.0MB

      • memory/4148-0-0x00007FF8DD770000-0x00007FF8DD780000-memory.dmp

        Filesize

        64KB

      • memory/4148-2-0x00007FF91D6F0000-0x00007FF91D8E5000-memory.dmp

        Filesize

        2.0MB

      • memory/4148-3-0x00007FF91D6F0000-0x00007FF91D8E5000-memory.dmp

        Filesize

        2.0MB

      • memory/4148-4-0x00007FF91AE10000-0x00007FF91B0D9000-memory.dmp

        Filesize

        2.8MB

      • memory/4148-5-0x00007FF8DD770000-0x00007FF8DD780000-memory.dmp

        Filesize

        64KB

      • memory/4148-6-0x00007FF91D6F0000-0x00007FF91D8E5000-memory.dmp

        Filesize

        2.0MB