c5ee6af8e3d3bdf216ce505c98458fb68f13360ad6c0cf50487b6bd3f33c52f8 | Triage

Analysis

max time kernel
67s
max time network
54s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
27-04-2024 09:29

Sharing

Report Analysis Logs

General

Target

TelegramRAT.exe.xml
Size

161B
MD5

c16b0746faa39818049fe38709a82c62
SHA1

3fa322fe6ed724b1bc4fd52795428a36b7b8c131
SHA256

d61bde901e7189cc97d45a1d4c4aa39d4c4de2b68419773ec774338506d659ad
SHA512

cbcba899a067f8dc32cfcbd1779a6982d25955de91e1e02cee8eaf684a01b0dee3642c2a954903720ff6086de5a082147209868c03665c89f814c6219be2df7c

Score

1^/10

Malware Config

Signatures

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\TelegramRAT.exe.xml"
1⤵
PID:6000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/6000-0-0x00007FF9EEA90000-0x00007FF9EEAA0000-memory.dmp

Filesize
64KB

Download
memory/6000-1-0x00007FFA2EA10000-0x00007FFA2EC05000-memory.dmp

Filesize
2.0MB

Download
memory/6000-2-0x00007FFA2C3A0000-0x00007FFA2C669000-memory.dmp

Filesize
2.8MB

Download
memory/6000-3-0x00007FF9EEA90000-0x00007FF9EEAA0000-memory.dmp

Filesize
64KB

Download
memory/6000-4-0x00007FFA2EA10000-0x00007FFA2EC05000-memory.dmp

Filesize
2.0MB

Download