Resubmissions

31/05/2024, 19:12

240531-xww3haah36 10

31/05/2024, 19:08

240531-xtpkmsag46 7

Analysis

  • max time kernel
    133s
  • max time network
    111s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/05/2024, 19:08

General

  • Target

    HellPr0ject.4.36ver/About/shily/tuner/rephaelGoxesBrasses/zingsGeobiosHemp.xml

  • Size

    110KB

  • MD5

    aef0bd4e837167b4ae479823b8889082

  • SHA1

    8de63f4bf3b0544aa2cf005f322c5aa7ee54071a

  • SHA256

    6f0d301e56821ed3bf42a2610ec329a6f66272c6a15820150903600e52680b55

  • SHA512

    1148e6cb3a32a8ecd18b86aa2fbed543a56e2ed1865c2fff0356663b0e394090dfb5eb3aad77099483078cff3ae1e41a71aeef77761d09f9bdd438254217e660

  • SSDEEP

    1536:dHY2yU4AxNXOxjGMsc2UR9nr8nKToSEwh5hAkJskVTaDMLxiLGkGKXXfYSJ9Scwl:vy6sJb2+nr8nKUSJGxkVTaD8xBkDJ9Ul

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\HellPr0ject.4.36ver\About\shily\tuner\rephaelGoxesBrasses\zingsGeobiosHemp.xml"
    1⤵
      PID:4832

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4832-0-0x00007FFCDDD70000-0x00007FFCDDD80000-memory.dmp

      Filesize

      64KB

    • memory/4832-1-0x00007FFD1DD8D000-0x00007FFD1DD8E000-memory.dmp

      Filesize

      4KB

    • memory/4832-2-0x00007FFD1DCF0000-0x00007FFD1DEE5000-memory.dmp

      Filesize

      2.0MB

    • memory/4832-3-0x00007FFD1DCF0000-0x00007FFD1DEE5000-memory.dmp

      Filesize

      2.0MB

    • memory/4832-4-0x00007FFD1DCF0000-0x00007FFD1DEE5000-memory.dmp

      Filesize

      2.0MB