Analysis

  • max time kernel
    47s
  • max time network
    53s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-06-2024 10:15

General

  • Target

    malta scanner/packages/System.Xml.XDocument.4.3.0/ref/netcore50/ko/System.Xml.XDocument.xml

  • Size

    163KB

  • MD5

    7f83d8d5bcff3a5338882c60c1de1ec7

  • SHA1

    e9f32de03d40dd62e48d50948e6df6ebf7b031ca

  • SHA256

    898c1f169d8c0bfe9b4219c84de18c7272b210cedd540c9bd2b7d0f16d35c510

  • SHA512

    754934a844dadf3d920ceea4ec54097fb8507134fc3602c16fc104837969b9a9f1d0fcac31e6d92972b84908ada9271cdba7417f5b8963b73d4b61b3dc031dd5

  • SSDEEP

    3072:AMh67rJRM/W8uh8cw8NJR8i/lohqwVJRVB/N8heu8uh8Irpht1QJRr/E86h8ga8I:AMh67rJRM/W8uh8cw8NJR8i/lohqwVJt

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\malta scanner\packages\System.Xml.XDocument.4.3.0\ref\netcore50\ko\System.Xml.XDocument.xml"
    1⤵
      PID:372

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/372-0-0x00007FF8C2950000-0x00007FF8C2960000-memory.dmp

      Filesize

      64KB

    • memory/372-1-0x00007FF90296D000-0x00007FF90296E000-memory.dmp

      Filesize

      4KB

    • memory/372-2-0x00007FF9028D0000-0x00007FF902AC5000-memory.dmp

      Filesize

      2.0MB

    • memory/372-3-0x00007FF9028D0000-0x00007FF902AC5000-memory.dmp

      Filesize

      2.0MB