Analysis
-
max time kernel
83s -
max time network
97s -
platform
windows11-21h2_x64 -
resource
win11-20231215-en -
resource tags
-
submitted
03/02/2024, 00:10
General
-
Target
wPalw_cwukn9gn/About/en-US/AppXRuntime.xml
-
Size
5KB
-
MD5
060cff4ab5cd4efeee7aefe922c4fc67
-
SHA1
b47cda7eb6516705ff72efd73bb8bb2698d38d98
-
SHA256
5bfdf03e67b43aea87a638b40eeacfe97cf183d5be3ebd5da0071654cfbbaad5
-
SHA512
12b12f5debf7e9f960b90013e881ac55509da198201a3d6f7fe1e7bbf6e410202b2ef6f80b837ad3d6c67cc13b8b38681984a84a7834501becb6514790510462
-
SSDEEP
96:jJpm5IJUVaBfgHt6kNEmB+kClbNpbwJbq2gATQ48v8pW03V:Xc3AIHFFq2HTZ8iW0F
Score
1/10
Malware Config
Signatures
-
Modifies Internet Explorer settings 1 TTPs 3 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\wPalw_cwukn9gn\About\en-US\AppXRuntime.xml"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\wPalw_cwukn9gn\About\en-US\AppXRuntime.xml2⤵
- Modifies Internet Explorer settings
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
756KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
756KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB