Analysis

  • max time kernel
    185s
  • max time network
    272s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-11-2023 11:23

General

  • Target

    Windows-11-v22H2-Security-Baseline/GPOs/{03A608E1-608B-4ECE-A44E-ACE3AF1ECD8B}/bkupInfo.xml

  • Size

    595B

  • MD5

    9e453a7a432a80198c49c842bf017851

  • SHA1

    8730c190ec791b2a3ed4cba7ef3a0e9e8c4f2e93

  • SHA256

    072b8c58904271d3b151ad44c8dac2f728acabb62e217b2f98236a3b9113de97

  • SHA512

    53c94c58fd03c02bdae0a7f96054936a0d3cdd8d458ba03e0b83385dfeeedefa5296c0f996dccc037eb4f00f41584b5b6fbb3083fdddab52187c83e537063451

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Windows-11-v22H2-Security-Baseline\GPOs\{03A608E1-608B-4ECE-A44E-ACE3AF1ECD8B}\bkupInfo.xml"
    1⤵
      PID:1920

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1920-1-0x00007FFE11910000-0x00007FFE11B05000-memory.dmp

      Filesize

      2.0MB

    • memory/1920-0-0x00007FFDD1990000-0x00007FFDD19A0000-memory.dmp

      Filesize

      64KB

    • memory/1920-2-0x00007FFE11910000-0x00007FFE11B05000-memory.dmp

      Filesize

      2.0MB

    • memory/1920-3-0x00007FFE0F030000-0x00007FFE0F2F9000-memory.dmp

      Filesize

      2.8MB

    • memory/1920-4-0x00007FFDD1990000-0x00007FFDD19A0000-memory.dmp

      Filesize

      64KB

    • memory/1920-5-0x00007FFE11910000-0x00007FFE11B05000-memory.dmp

      Filesize

      2.0MB