Analysis

  • max time kernel
    92s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/02/2024, 21:52

General

  • Target

    geode/resources/geode.loader/APISheet-uhd.xml

  • Size

    6KB

  • MD5

    881ce7ef97c058d185138317578c645b

  • SHA1

    7b3dc6bba7338b44b2f844f4f2ddb824114e04e7

  • SHA256

    0d9140e7c78c2b81b78ff0f14150853f427b674a1e234e26745e8663d3db1d3d

  • SHA512

    3177680723a0333bc08cfe9943d812f8d9febdea7b7eec8cd6799ef8cd150198ab72bc81e9773cbe6eede26e7b6b33bc9d89b7783dce4b26f8bd70dda2ca50a4

  • SSDEEP

    96:CyQcJcwcMFuRx0x4zcAcnonz9s9xO3xOk5cZrlcZxUcZRjy:XaUo14rrKxpR+

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\geode\resources\geode.loader\APISheet-uhd.xml"
    1⤵
      PID:3772

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3772-0-0x00007FFD84DD0000-0x00007FFD84DE0000-memory.dmp

      Filesize

      64KB

    • memory/3772-1-0x00007FFDC4D50000-0x00007FFDC4F45000-memory.dmp

      Filesize

      2.0MB

    • memory/3772-2-0x00007FFDC2860000-0x00007FFDC2B29000-memory.dmp

      Filesize

      2.8MB

    • memory/3772-3-0x00007FFD84DD0000-0x00007FFD84DE0000-memory.dmp

      Filesize

      64KB

    • memory/3772-4-0x00007FFDC4D50000-0x00007FFDC4F45000-memory.dmp

      Filesize

      2.0MB