Analysis

  • max time kernel
    404s
  • max time network
    443s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-11-2023 16:38

General

  • Target

    Lethal Company/MonoBleedingEdge/etc/mono/mconfig/config.xml

  • Size

    25KB

  • MD5

    f34b330f20dce1bdcce9058fca287099

  • SHA1

    936520d5bb5c00a1985d7a4c4f0ef763a9031862

  • SHA256

    0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d

  • SHA512

    d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd

  • SSDEEP

    192:Bt074zTxASaKp3T7pJsPpPT8B13eeaVonGdEBMmhVbeyeTfWDBzmAwdavahmhNIa:LAMDp35JyPCCu96yJwgag

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Lethal Company\MonoBleedingEdge\etc\mono\mconfig\config.xml"
    1⤵
      PID:4400

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4400-0-0x00007FFDD1990000-0x00007FFDD19A0000-memory.dmp

      Filesize

      64KB

    • memory/4400-1-0x00007FFE11910000-0x00007FFE11B05000-memory.dmp

      Filesize

      2.0MB

    • memory/4400-2-0x00007FFE11910000-0x00007FFE11B05000-memory.dmp

      Filesize

      2.0MB

    • memory/4400-3-0x00007FFE0F030000-0x00007FFE0F2F9000-memory.dmp

      Filesize

      2.8MB

    • memory/4400-4-0x00007FFDD1990000-0x00007FFDD19A0000-memory.dmp

      Filesize

      64KB

    • memory/4400-5-0x00007FFE11910000-0x00007FFE11B05000-memory.dmp

      Filesize

      2.0MB