Analysis

  • max time kernel
    243s
  • max time network
    436s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-11-2023 09:02

General

  • Target

    GameSkins.xml

  • Size

    1KB

  • MD5

    a3440abb0933057fc637611385ba1e7a

  • SHA1

    bd64888a47164e4f96b2d30c27df7dfd62a87517

  • SHA256

    5ef4e3ca77bc0640617d5ad3b404f5a98d45772936256e095dde92bdcc0e8bbb

  • SHA512

    ca76ddef11335110be56537c20a32c9f2bc57da6c7a5fe663cdcc248d9c3700e2dacc157a718bacb19f7cca0a9fa28964e5631a672f2be7ddf2f95adbe55f533

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\GameSkins.xml"
    1⤵
      PID:5060

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5060-0-0x00007FF98E790000-0x00007FF98E7A0000-memory.dmp

      Filesize

      64KB

    • memory/5060-1-0x00007FF9CE710000-0x00007FF9CE905000-memory.dmp

      Filesize

      2.0MB

    • memory/5060-2-0x00007FF9CC2A0000-0x00007FF9CC569000-memory.dmp

      Filesize

      2.8MB

    • memory/5060-3-0x00007FF98E790000-0x00007FF98E7A0000-memory.dmp

      Filesize

      64KB

    • memory/5060-4-0x00007FF9CE710000-0x00007FF9CE905000-memory.dmp

      Filesize

      2.0MB