Analysis

  • max time kernel
    136s
  • max time network
    183s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    07-11-2023 13:42

General

  • Target

    BOYFRIEND_DEAD.xml

  • Size

    15KB

  • MD5

    67829ebffcff8cca9503056f58a146e2

  • SHA1

    28c537b5599d9ed54592b3ae37c496ec3790802c

  • SHA256

    6ba9038ddc78875bf5f9cb07f18607ff842be5bcf7d7ce8df6d76ddca1979336

  • SHA512

    e873c0a380b940744038eb0d4377a69aa3818613163962bef5b1dca023d895857d1964c01524e24658f6787b1fb3d0dae5552cb83428f7d32e108a228b35d850

  • SSDEEP

    48:2MREeC0EpZo13CRkr2FOYcoRS3kuDm9HdSH3M/2jOspdVFfDVGV0VRV9VGVOV8VB:knRFzrjDblNn

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\BOYFRIEND_DEAD.xml"
    1⤵
      PID:2012

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2012-0-0x00007FFB52C30000-0x00007FFB52C40000-memory.dmp

      Filesize

      64KB

    • memory/2012-1-0x00007FFB92BB0000-0x00007FFB92DA5000-memory.dmp

      Filesize

      2.0MB

    • memory/2012-2-0x00007FFB92BB0000-0x00007FFB92DA5000-memory.dmp

      Filesize

      2.0MB

    • memory/2012-3-0x00007FFB902D0000-0x00007FFB90599000-memory.dmp

      Filesize

      2.8MB

    • memory/2012-4-0x00007FFB52C30000-0x00007FFB52C40000-memory.dmp

      Filesize

      64KB

    • memory/2012-5-0x00007FFB92BB0000-0x00007FFB92DA5000-memory.dmp

      Filesize

      2.0MB