b6ae0fe765ca7755b1496b3c74645daa54d3e9bda37c30c4afdcefdc298fa179 | Triage

Analysis

max time kernel
90s
max time network
100s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11/05/2024, 16:19

Sharing

Report Analysis Logs

General

Target

EDGY/MonoBleedingEdge/etc/mono/2.0/settings.xml
Size

2KB
MD5

22c818a23169e12bd3c8587b6394c731
SHA1

dd2be2dbccd34736719301aee92429d4258ea5a0
SHA256

49c6160f9d54af4270a3b4e997fc4a8301f79b9e2070118fa46ddbcbbc44f9a2
SHA512

c1352e817e01277413a1790a94a4f979dc1b8333874fef28d735441c034c97bf8ce501fd9cd04c47d25541a0c1d54fcd4dd3bee9ac3e8fbde83ada9a1d2662d7

Score

1^/10

Malware Config

Signatures

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\EDGY\MonoBleedingEdge\etc\mono\2.0\settings.xml"
1⤵
PID:336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/336-0-0x00007FFE5C330000-0x00007FFE5C340000-memory.dmp

Filesize
64KB

Download
memory/336-1-0x00007FFE9C34D000-0x00007FFE9C34E000-memory.dmp

Filesize
4KB

Download
memory/336-2-0x00007FFE9C2B0000-0x00007FFE9C4A5000-memory.dmp

Filesize
2.0MB

Download
memory/336-3-0x00007FFE9C2B0000-0x00007FFE9C4A5000-memory.dmp

Filesize
2.0MB

Download