Analysis

  • max time kernel
    424s
  • max time network
    439s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/11/2023, 19:16

General

  • Target

    Result_180_Multiple_NoRedFlags.csv.xml

  • Size

    7KB

  • MD5

    fe2335a207232348b3cc0052b571c074

  • SHA1

    868101972181b61e520e458012d8ad31cce6bc5b

  • SHA256

    c700d5558db98dc7b44d31cf5e2e4dddda78a29eee71365f292059f89c3632fa

  • SHA512

    eafcadfc1e3be911a5ba827bfeecca56a315c4a387a273e7195e9f25946ba910e82e7349360d12a007f19c9124863f16f8f725701f9a6cb4511df5bcc6173d0f

  • SSDEEP

    96:59a4lKL+kfbArgjnNFSqpllxagrQAPsFqyxPsHn:bJQ50rgjnNIqTauJPIIn

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Result_180_Multiple_NoRedFlags.csv.xml"
    1⤵
      PID:4100

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4100-0-0x00007FFCA3A30000-0x00007FFCA3A40000-memory.dmp

      Filesize

      64KB

    • memory/4100-1-0x00007FFCE39B0000-0x00007FFCE3BA5000-memory.dmp

      Filesize

      2.0MB

    • memory/4100-2-0x00007FFCE39B0000-0x00007FFCE3BA5000-memory.dmp

      Filesize

      2.0MB

    • memory/4100-3-0x00007FFCE39B0000-0x00007FFCE3BA5000-memory.dmp

      Filesize

      2.0MB

    • memory/4100-4-0x00007FFCE11F0000-0x00007FFCE14B9000-memory.dmp

      Filesize

      2.8MB

    • memory/4100-5-0x00007FFCA3A30000-0x00007FFCA3A40000-memory.dmp

      Filesize

      64KB

    • memory/4100-6-0x00007FFCE39B0000-0x00007FFCE3BA5000-memory.dmp

      Filesize

      2.0MB