Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-06-2024 10:48

General

  • Target

    FNIS Creature Pack 7.6/Data/Meshes/actors/bear/behaviors/bearbehavior_TEMPLATE.xml

  • Size

    87KB

  • MD5

    cc7dcc6c550e16d4dcb2e1cf1ad6a616

  • SHA1

    d62e9aab28d1c18b5c9fea718dfe46b3c534b5d3

  • SHA256

    ee8fd8411c17666c45af38cf7786308b438d3836efb594b0b7e176c832832779

  • SHA512

    215168a510e63c61c523878e157c060ad1c0832d27832ac7d91c0547da111362c30abe7db7b75af6a4ad9a3bbbbc7e0f402283c016305419ddddafb0dfd05f5c

  • SSDEEP

    1536:+NgmdCZ8OQbnZ9W9AdLlw1NSr5pt8RQwsu00QH90RGtUu37E9xSdsPxTapSdKn4g:mpZ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\FNIS Creature Pack 7.6\Data\Meshes\actors\bear\behaviors\bearbehavior_TEMPLATE.xml"
    1⤵
      PID:4824

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4824-0-0x00007FF905AB0000-0x00007FF905AC0000-memory.dmp

      Filesize

      64KB

    • memory/4824-1-0x00007FF945ACD000-0x00007FF945ACE000-memory.dmp

      Filesize

      4KB

    • memory/4824-2-0x00007FF945A30000-0x00007FF945C25000-memory.dmp

      Filesize

      2.0MB

    • memory/4824-3-0x00007FF945A30000-0x00007FF945C25000-memory.dmp

      Filesize

      2.0MB