Overview
overview
10Static
static
3Office_201...ll.exe
windows10-2004-x64
10Office_201...te.exe
windows10-2004-x64
7Office_201...re.xml
windows10-2004-x64
1Office_201...ll.xml
windows10-2004-x64
1Office_201...pp.exe
windows10-2004-x64
1Office_201...00.dll
windows10-2004-x64
1Office_201...pp.exe
windows10-2004-x64
1Office_201...00.dll
windows10-2004-x64
3Analysis
-
max time kernel
593s -
max time network
604s -
platform
windows10-2004_x64 -
resource
win10v2004-20240319-en -
resource tags
arch:x64arch:x86image:win10v2004-20240319-enlocale:en-usos:windows10-2004-x64system -
submitted
07-04-2024 19:50
Static task
static1
Behavioral task
behavioral1
Sample
Office_2013-2024_C2R_Install/OInstall.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
Office_2013-2024_C2R_Install/activate.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Office_2013-2024_C2R_Install/files/Configure.xml
Resource
win10v2004-20240319-en
Behavioral task
behavioral4
Sample
Office_2013-2024_C2R_Install/files/Uninstall.xml
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Office_2013-2024_C2R_Install/files/x64/cleanospp.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral6
Sample
Office_2013-2024_C2R_Install/files/x64/msvcr100.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Office_2013-2024_C2R_Install/files/x86/cleanospp.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral8
Sample
Office_2013-2024_C2R_Install/files/x86/msvcr100.dll
Resource
win10v2004-20240226-en
General
-
Target
Office_2013-2024_C2R_Install/files/Configure.xml
-
Size
1KB
-
MD5
7d74885dacc883e14f50ec18dfe0ab24
-
SHA1
9126424e22e38854797a86617d56e2c37f551125
-
SHA256
754b93802239741325c782d3368ac57d1b3bfc6e1d1c5c56bf51b99b91c491cc
-
SHA512
4cf90464b385dab0081324d693dd6171639c7937ce7d1ff1711e0bef95e6e63840c4549c9b1521ae8c48f8d4424a52122f6811dc500c76f2e1a0e4c8c60713d2
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Office_2013-2024_C2R_Install\files\Configure.xml"1⤵PID:2068
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4132 --field-trial-handle=2260,i,4762972005863767630,9297428255150568035,262144 --variations-seed-version /prefetch:81⤵PID:4084
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4208 --field-trial-handle=2260,i,4762972005863767630,9297428255150568035,262144 --variations-seed-version /prefetch:81⤵PID:2020