Analysis

  • max time kernel
    128s
  • max time network
    180s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-11-2023 09:02

General

  • Target

    Settings.xml

  • Size

    201B

  • MD5

    e10c48bdc89fd8ac2b005662f1aa19ca

  • SHA1

    d544034e40c1c5f9d034fa5f84612f59f02a1b07

  • SHA256

    a1194bfa9ff50242761b6eaea94c5ee283b64bf27c2ffe58497e8ec0fc03ea0a

  • SHA512

    0ecc31bb48d03b2740b25488a4caa7740b72b059768659cf45cedabb925fc6665d284a5e900856bf3569ca24c4f432d417ed154c30289ef87f01b1a931dc5f08

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Settings.xml"
    1⤵
      PID:4220

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4220-0-0x00007FFF8A650000-0x00007FFF8A660000-memory.dmp

      Filesize

      64KB

    • memory/4220-1-0x00007FFFCA5D0000-0x00007FFFCA7C5000-memory.dmp

      Filesize

      2.0MB

    • memory/4220-2-0x00007FFFCA5D0000-0x00007FFFCA7C5000-memory.dmp

      Filesize

      2.0MB

    • memory/4220-3-0x00007FFFC81B0000-0x00007FFFC8479000-memory.dmp

      Filesize

      2.8MB

    • memory/4220-4-0x00007FFF8A650000-0x00007FFF8A660000-memory.dmp

      Filesize

      64KB

    • memory/4220-5-0x00007FFFCA5D0000-0x00007FFFCA7C5000-memory.dmp

      Filesize

      2.0MB