Analysis

  • max time kernel
    127s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2023, 23:23

General

  • Target

    word/theme/theme1.xml

  • Size

    8KB

  • MD5

    2bc1ce59fd7b0a0b8c0c481440aff611

  • SHA1

    3af65e014f0aacc7a5070dd36206b33c324ba156

  • SHA256

    2760e6e84d4bf365af6570192dbe9cb57bb32653388d0ea041d116b25b1ca0a2

  • SHA512

    cad8e8f90aa4ee2fa6b4e5a9c20ef0f876ccc3d6d2f8978f176308a1e3a8c86e57fc0a505ab8d22a89b60b467ae5a6e844613603e192d965564e0583dd6e5574

  • SSDEEP

    96:xLM1d+8FNk/VmWHS95EUUwctUNoJuLIMFNk/VmWHS95EyUwctUNoJuLla5H7O8jE:xLM9AcCnGuMBR

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\word\theme\theme1.xml"
    1⤵
      PID:316

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/316-0-0x00007FFF8A650000-0x00007FFF8A660000-memory.dmp

      Filesize

      64KB

    • memory/316-1-0x00007FFFCA5D0000-0x00007FFFCA7C5000-memory.dmp

      Filesize

      2.0MB

    • memory/316-2-0x00007FFFCA5D0000-0x00007FFFCA7C5000-memory.dmp

      Filesize

      2.0MB

    • memory/316-3-0x00007FFFC81B0000-0x00007FFFC8479000-memory.dmp

      Filesize

      2.8MB

    • memory/316-4-0x00007FFF8A650000-0x00007FFF8A660000-memory.dmp

      Filesize

      64KB

    • memory/316-5-0x00007FFFCA5D0000-0x00007FFFCA7C5000-memory.dmp

      Filesize

      2.0MB