Analysis

  • max time kernel
    92s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/06/2024, 10:48

General

  • Target

    FNIS Creature Pack 7.6/Data/Meshes/actors/atronachflame/behaviors/atronachflamebehavior_TEMPLATE.xml

  • Size

    299KB

  • MD5

    329b0b4c872df4ae4047029327d7fe37

  • SHA1

    55cd8d2c9fe5656de7869fb95f0e3877f0326e70

  • SHA256

    b7dcc2ba72bd5678399e2d2ed25a6b9c5c7927a3f39814e8122c4f599a9915e5

  • SHA512

    553c39fd9e35366f883176125c45b0ab6bebd5cff67479db66d7b5ecca016907d8b00ce2b7c9cfb0ea4be22453f636c6754149089c09d58d3d49c4a2282fedbc

  • SSDEEP

    1536:87Sm0GpOobxZVW0MHfx9+YvhEL/cNb20RR32e0qYgbza5gqlpWv3aSRwGmdelBZx:7j0E1

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\FNIS Creature Pack 7.6\Data\Meshes\actors\atronachflame\behaviors\atronachflamebehavior_TEMPLATE.xml"
    1⤵
      PID:1100

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1100-0-0x00007FFD39DF0000-0x00007FFD39E00000-memory.dmp

      Filesize

      64KB

    • memory/1100-2-0x00007FFD79D70000-0x00007FFD79F65000-memory.dmp

      Filesize

      2.0MB

    • memory/1100-1-0x00007FFD79E0D000-0x00007FFD79E0E000-memory.dmp

      Filesize

      4KB

    • memory/1100-3-0x00007FFD79D70000-0x00007FFD79F65000-memory.dmp

      Filesize

      2.0MB

    • memory/1100-4-0x00007FFD79D70000-0x00007FFD79F65000-memory.dmp

      Filesize

      2.0MB