Analysis

  • max time kernel
    142s
  • max time network
    271s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-11-2023 06:53

General

  • Target

    machine.xml

  • Size

    33KB

  • MD5

    0869544722561f5aff0eefc83fc7b001

  • SHA1

    1e118f4b5c1c6a7b1858e3fccb1b1d1095561976

  • SHA256

    ef9b9387168fd1dd6c996f96c134d9c44f8eb06f9587004bf997252a520182d6

  • SHA512

    ced7c9a5363cabdb87b01ed6b4ca190a690640dddf5cbcc0438acdc611a8ee942cb6cd73c78d3fc2d59f70171f22ac832a10b1e23758dc92599ee24acd978ac2

  • SSDEEP

    384:PbtltttttSRtNRtcRtGrRtSRtTf5Rt70zDgRt2Rtuj4f1RDRty6ugyunHMSeuWuh:dkn

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\machine.xml"
    1⤵
      PID:184

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/184-1-0x00007FFF7F450000-0x00007FFF7F645000-memory.dmp

      Filesize

      2.0MB

    • memory/184-0-0x00007FFF3F4D0000-0x00007FFF3F4E0000-memory.dmp

      Filesize

      64KB

    • memory/184-2-0x00007FFF7F450000-0x00007FFF7F645000-memory.dmp

      Filesize

      2.0MB

    • memory/184-3-0x00007FFF7F450000-0x00007FFF7F645000-memory.dmp

      Filesize

      2.0MB

    • memory/184-4-0x00007FFF7CF70000-0x00007FFF7D239000-memory.dmp

      Filesize

      2.8MB

    • memory/184-5-0x00007FFF3F4D0000-0x00007FFF3F4E0000-memory.dmp

      Filesize

      64KB

    • memory/184-6-0x00007FFF7F450000-0x00007FFF7F645000-memory.dmp

      Filesize

      2.0MB