Overview
overview
7Static
static
1Microsoft....we.zip
windows10-2004-x64
1AppxBlockMap.xml
windows10-2004-x64
1AppxMetada...st.xml
windows10-2004-x64
1AppxSignature.p7x
windows10-2004-x64
3Microsoft....4.appx
windows10-2004-x64
Microsoft....4.appx
windows10-2004-x64
1Microsoft....6.appx
windows10-2004-x64
7[Content_Types].xml
windows10-2004-x64
1Analysis
-
max time kernel
90s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-es -
resource tags
arch:x64arch:x86image:win10v2004-20231222-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
10-02-2024 04:51
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.HEVCVideoExtension_2.0.61931.0_neutral_~_8wekyb3d8bbwe.zip
Resource
win10v2004-20231215-es
Behavioral task
behavioral2
Sample
AppxBlockMap.xml
Resource
win10v2004-20231215-es
Behavioral task
behavioral3
Sample
AppxMetadata/AppxBundleManifest.xml
Resource
win10v2004-20231222-es
Behavioral task
behavioral4
Sample
AppxSignature.p7x
Resource
win10v2004-20231215-es
Behavioral task
behavioral5
Sample
Microsoft.HEVCVideoExtension_8wekyb3d8bbwe.arm64.appx
Resource
win10v2004-20231215-es
Behavioral task
behavioral6
Sample
Microsoft.HEVCVideoExtension_8wekyb3d8bbwe.x64.appx
Resource
win10v2004-20231215-es
Behavioral task
behavioral7
Sample
Microsoft.HEVCVideoExtension_8wekyb3d8bbwe.x86.appx
Resource
win10v2004-20231215-es
Behavioral task
behavioral8
Sample
[Content_Types].xml
Resource
win10v2004-20231215-es
General
-
Target
AppxMetadata/AppxBundleManifest.xml
-
Size
7KB
-
MD5
7a206184dde4e1c26f85397605d77d51
-
SHA1
69ba4cccdf2fcda97e44ea05a51c945249fec7ab
-
SHA256
3bea2195b3e46e859288426fb84a7a0d3a00a15b53b38728b4eca3b51dda0429
-
SHA512
be4c84f24e8fbac2d4d7a6fd1fb1f0b2c1d5671d24035b70c3ce06e1a63c860d0d0a8ee52ad43b33ea2697488ac7cb67c72211fa8c30b99b8bb3a69e96c17b96
-
SSDEEP
192:WwF7yLvg21SeJR/ADx9bqxH8FHZeTb6b9rxZb5K4ETQVPvT7nRwfX7XZZ/CuD0dz:hF7yLvg21SeJR/ADx9bqxH8FHZeTb6bD
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\AppxMetadata\AppxBundleManifest.xml"1⤵PID:1556