Overview

overview

3

Static

static

1

Microsoft....we.zip

windows7-x64

1

Microsoft....we.zip

windows10-2004-x64

1

AppxBlockMap.xml

windows7-x64

1

AppxBlockMap.xml

windows10-2004-x64

1

AppxMetada...st.xml

windows7-x64

1

AppxMetada...st.xml

windows10-2004-x64

1

AppxSignature.p7x

windows7-x64

3

AppxSignature.p7x

windows10-2004-x64

3

Microsoft....4.appx

windows7-x64

Microsoft....4.appx

windows10-2004-x64

Microsoft....4.appx

windows7-x64

Microsoft....4.appx

windows10-2004-x64

1

Microsoft....6.appx

windows7-x64

Microsoft....6.appx

windows10-2004-x64

1

[Content_Types].xml

windows7-x64

1

[Content_Types].xml

windows10-2004-x64

1

Resubmissions

25-10-2023 13:58

231025-q979cshd42 1

25-10-2023 13:54

231025-q72c2ahc87 3

25-10-2023 13:53

231025-q6ywhshc46 1

Analysis

  • max time kernel
    137s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-10-2023 13:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    [Content_Types].xml

  • Size

    469B

  • MD5

    984220fba7378afbdc64f7222902a625

  • SHA1

    3b7b316bed4abcd2a010a8a54c12606d272c4a3d

  • SHA256

    8ae94b77a2a3a7c0123a95da7311fff3c947b0df40e003ff5ea69492e7b8eeaa

  • SHA512

    41ef03d35d65ad98f1ec1d2eaf80a0e821993d193157800025252352840247dbe06816b9171c41183ffcbf7e8eca4725d5fca4f0badcfd346c6cc241277d625d

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\[Content_Types].xml"
    1⤵
      PID:3740

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3740-1-0x00007FF979130000-0x00007FF979325000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/3740-0-0x00007FF9391B0000-0x00007FF9391C0000-memory.dmp

      Filesize

      64KB

      Download

    • memory/3740-2-0x00007FF979130000-0x00007FF979325000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/3740-3-0x00007FF976A10000-0x00007FF976CD9000-memory.dmp

      Filesize

      2.8MB

      Download

    • memory/3740-4-0x00007FF9391B0000-0x00007FF9391C0000-memory.dmp

      Filesize

      64KB

      Download

    • memory/3740-5-0x00007FF979130000-0x00007FF979325000-memory.dmp

      Filesize

      2.0MB

      Download