Analysis

  • max time kernel
    122s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-08-2023 04:44

General

  • Target

    stella_e2e.xml

  • Size

    4KB

  • MD5

    deb02e17bcc92fef2298a466d71f9457

  • SHA1

    e4259e3c073d4cb4af07bb3a2147fb1e8d7943cb

  • SHA256

    83d0ffc0ea968c3b71c194ecb47bbeb4512137a06e8f7ff7b3973ca23dc467bf

  • SHA512

    cda1fc10cba541658d1f826d735641c2058fadbaf42a9f05e1d8cd3b25fe146db53187548b131bd248e56f34dfebeb3e7b2c1d53784dbe88c8266731aa7401cc

  • SSDEEP

    96:38fSxf3sWhw3h0A+sJCxox9rxT57OxjrWthy9xFnNLWtEy8PM+cRSjOA+Ay:OSxf3sWhw3hysJCxoxHtSZ6tMNoaPsAw

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\stella_e2e.xml"
    1⤵
      PID:2164
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 2164 -s 452
        2⤵
        • Program crash
        PID:3532
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 368 -p 2164 -ip 2164
      1⤵
        PID:3420

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2164-1-0x00007FFB71A70000-0x00007FFB71C65000-memory.dmp

        Filesize

        2.0MB

      • memory/2164-0-0x00007FFB31AF0000-0x00007FFB31B00000-memory.dmp

        Filesize

        64KB

      • memory/2164-2-0x00007FFB71A70000-0x00007FFB71C65000-memory.dmp

        Filesize

        2.0MB

      • memory/2164-3-0x00007FFB71A70000-0x00007FFB71C65000-memory.dmp

        Filesize

        2.0MB

      • memory/2164-4-0x00007FFB6F7C0000-0x00007FFB6FA89000-memory.dmp

        Filesize

        2.8MB

      • memory/2164-5-0x00007FFB31AF0000-0x00007FFB31B00000-memory.dmp

        Filesize

        64KB

      • memory/2164-6-0x00007FFB71A70000-0x00007FFB71C65000-memory.dmp

        Filesize

        2.0MB