Analysis

  • max time kernel
    1364s
  • max time network
    1163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    20/11/2023, 12:39

General

  • Target

    TGX V4 - 1.7.1/Cake.Powershell.xml

  • Size

    58KB

  • MD5

    895874f68249ea7571d9d3b7b797470f

  • SHA1

    8af53925d5c720ca235498223b6f00c3c6a20cd9

  • SHA256

    72bd08040ca3211c24444f2155b20a29ccfbb6b45b8016e4dc83e16c2493d2c0

  • SHA512

    7d2aba10caa6b707ef733609379fb30dc41cd88e6a5481943ec7b9fb2b40834db967b82dd5892a0d17601bb77c45aa193d82888e35fa921486fe837d2c4e50f4

  • SSDEEP

    384:w4UnUQqIs/PsMUTsfvnmUUqndMB1A1Dn4o9jx15zkD49uJWLnd+MLTnNryjs6+UF:Pbvjwi/SA01A1Dn4o9jx1tELSo778a

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\TGX V4 - 1.7.1\Cake.Powershell.xml"
    1⤵
      PID:3392

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3392-0-0x00007FF8457F0000-0x00007FF845800000-memory.dmp

      Filesize

      64KB

    • memory/3392-1-0x00007FF885770000-0x00007FF885965000-memory.dmp

      Filesize

      2.0MB

    • memory/3392-2-0x00007FF883340000-0x00007FF883609000-memory.dmp

      Filesize

      2.8MB

    • memory/3392-3-0x00007FF8457F0000-0x00007FF845800000-memory.dmp

      Filesize

      64KB

    • memory/3392-4-0x00007FF885770000-0x00007FF885965000-memory.dmp

      Filesize

      2.0MB