Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
-
submitted
02-09-2023 18:35
General
-
Target
https://www.libreoffice.org/donate/dl/win-x86_64/7.6.0/en-US/LibreOffice_7.6.0_Win_x86-64.msi
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 1 IoCs
-
Unknown use of msiexec with remote resource 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes
-
C:\Windows\system32\msiexec.exemsiexec.exe /I https://www.libreoffice.org/donate/dl/win-x86_64/7.6.0/en-US/LibreOffice_7.6.0_Win_x86-64.msi1⤵
- Blocklisted process makes network request
- Unknown use of msiexec with remote resource
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow