Analysis

  • max time kernel
    145s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/11/2023, 09:02

General

  • Target

    UserData.xml

  • Size

    565B

  • MD5

    83e4f6944f09a0516f70e7688be5ceba

  • SHA1

    ef14af8dd8750ffc3bec4808ba8e579f893e0d41

  • SHA256

    3bb5aa97c60ae661d0789d2115f1ac8ba24c8575a4219fbb906ab7e271ccbb70

  • SHA512

    15ea41e3294280ea8c5217616735135d2dd4b79fe33744951a6dc51696d253fc9df934987881401b311c70251b3e71d6989e7707dd58174b9531d4f3c591e195

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\UserData.xml"
    1⤵
      PID:4208

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4208-0-0x00007FFDD1AB0000-0x00007FFDD1AC0000-memory.dmp

      Filesize

      64KB

    • memory/4208-1-0x00007FFE11A30000-0x00007FFE11C25000-memory.dmp

      Filesize

      2.0MB

    • memory/4208-2-0x00007FFE0F610000-0x00007FFE0F8D9000-memory.dmp

      Filesize

      2.8MB

    • memory/4208-3-0x00007FFDD1AB0000-0x00007FFDD1AC0000-memory.dmp

      Filesize

      64KB

    • memory/4208-4-0x00007FFE11A30000-0x00007FFE11C25000-memory.dmp

      Filesize

      2.0MB