Resubmissions

31/05/2024, 19:12

240531-xww3haah36 10

31/05/2024, 19:08

240531-xtpkmsag46 7

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/05/2024, 19:08

General

  • Target

    HellPr0ject.4.36ver/About/shily/tuner/vesteeOctodon.xml

  • Size

    17KB

  • MD5

    8565dbbbc90942983a3257a40d15c6c7

  • SHA1

    3d8eaf31bf0d842f3d50ad26f6be3b58bcb5b156

  • SHA256

    653c48435b1e4bfdff2eb2aa831713f32982579ffae7ea084b485754f66810df

  • SHA512

    8068392d22032a72f9cfa2c8fe6ac4f06834d0f622bd0d509c916ac1f55f980e80f3149393634c58257d9e5903f2383031ce8928713322c7f780658dfc0e2a05

  • SSDEEP

    384:7s1bY4s6v2M3r83oxqPOMXWj588LQBSm8jBJK8W4H+:w1brv2k8YxqPOMXWj58Uk8W4H+

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\HellPr0ject.4.36ver\About\shily\tuner\vesteeOctodon.xml"
    1⤵
      PID:640

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/640-0-0x00007FFDC46D0000-0x00007FFDC46E0000-memory.dmp

      Filesize

      64KB

    • memory/640-1-0x00007FFE046ED000-0x00007FFE046EE000-memory.dmp

      Filesize

      4KB

    • memory/640-2-0x00007FFE04650000-0x00007FFE04845000-memory.dmp

      Filesize

      2.0MB

    • memory/640-3-0x00007FFE04650000-0x00007FFE04845000-memory.dmp

      Filesize

      2.0MB