11b00d4677dcb716991e4021c938ada483c5f63a2d465c7d3166296c3a13c4b3 | Triage

Submit
Reports

Overview

overview

4

Static

static

3

CurseForge...1).exe

windows7-x64

4

CurseForge...1).exe

windows10-2004-x64

4

$PLUGINSDI...xe.xml

windows7-x64

1

$PLUGINSDI...xe.xml

windows10-2004-x64

1

$PLUGINSDI...s.json

windows7-x64

3

$PLUGINSDI...s.json

windows10-2004-x64

3

$PLUGINSDI...p.html

windows7-x64

1

$PLUGINSDI...p.html

windows10-2004-x64

1

$PLUGINSDI...x.html

windows7-x64

1

$PLUGINSDI...x.html

windows10-2004-x64

1

$PLUGINSDI...app.js

windows7-x64

3

$PLUGINSDI...app.js

windows10-2004-x64

3

$PLUGINSDI...uts.js

windows7-x64

3

$PLUGINSDI...uts.js

windows10-2004-x64

3

$PLUGINSDI...dle.js

windows7-x64

3

$PLUGINSDI...dle.js

windows10-2004-x64

3

$PLUGINSDI...min.js

windows7-x64

3

$PLUGINSDI...min.js

windows10-2004-x64

3

$PLUGINSDI...ons.js

windows7-x64

3

$PLUGINSDI...ons.js

windows10-2004-x64

3

$PLUGINSDI...ics.js

windows7-x64

3

$PLUGINSDI...ics.js

windows10-2004-x64

3

$PLUGINSDI...nds.js

windows7-x64

3

$PLUGINSDI...nds.js

windows10-2004-x64

3

$PLUGINSDI...ies.js

windows7-x64

3

$PLUGINSDI...ies.js

windows10-2004-x64

3

$PLUGINSDI...ate.js

windows7-x64

3

$PLUGINSDI...ate.js

windows10-2004-x64

3

$PLUGINSDI...der.js

windows7-x64

3

$PLUGINSDI...der.js

windows10-2004-x64

3

$PLUGINSDI...ils.js

windows7-x64

3

$PLUGINSDI...ils.js

windows10-2004-x64

3

Analysis

max time kernel
134s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
01-07-2024 21:03

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

CurseForge Windows - Installer (1).exe

Resource

win7-20240611-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

CurseForge Windows - Installer (1).exe

Resource

win10v2004-20240611-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/OWInstaller.exe.xml

Resource

win7-20240611-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/OWInstaller.exe.xml

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/app/_locales/de/messages.json

Resource

win7-20240611-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/app/_locales/de/messages.json

Resource

win10v2004-20240508-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/app/cmp.html

Resource

win7-20240419-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/app/cmp.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/app/index.html

Resource

win7-20240611-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/app/index.html

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/app/js/app.js

Resource

win7-20240611-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/app/js/app.js

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/app/js/block_inputs.js

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/app/js/block_inputs.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/app/js/libs/cmp.bundle.js

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/app/js/libs/cmp.bundle.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js

Resource

win7-20240611-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/app/js/models/notifications.js

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/app/js/models/notifications.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

$PLUGINSDIR/app/js/utils/analytics.js

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

$PLUGINSDIR/app/js/utils/analytics.js

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

$PLUGINSDIR/app/js/utils/commands.js

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

$PLUGINSDIR/app/js/utils/commands.js

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

$PLUGINSDIR/app/js/utils/cookies.js

Resource

win7-20240419-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

$PLUGINSDIR/app/js/utils/cookies.js

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

$PLUGINSDIR/app/js/utils/modal-events-delegate.js

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

$PLUGINSDIR/app/js/utils/modal-events-delegate.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

$PLUGINSDIR/app/js/utils/strings-loader.js

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

$PLUGINSDIR/app/js/utils/strings-loader.js

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

$PLUGINSDIR/app/js/utils/utils.js

Resource

win7-20240220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

$PLUGINSDIR/app/js/utils/utils.js

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

$PLUGINSDIR/OWInstaller.exe.xml
Size

632B
MD5

82d22e4e19e27e306317513b9bfa70ff
SHA1

ff3c7dd06b7fff9c12b1beaf0ca32517710ac161
SHA256

272e4c5364193e73633caa3793e07509a349b79314ea01808b24fdb12c51b827
SHA512

b0fb708f6bcab923f5b381b7f03b3220793eff69559e895d7cf0e33781358ec2159f9c8276bf8ba81302feda8721327d43607868de5caaa9015d7bb82060a0b9

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\OWInstaller.exe.xml"
1⤵
PID:3808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3808-0-0x00007FFA39DF0000-0x00007FFA39E00000-memory.dmp

Filesize
64KB

Download
memory/3808-1-0x00007FFA79E0D000-0x00007FFA79E0E000-memory.dmp

Filesize
4KB

Download
memory/3808-2-0x00007FFA79D70000-0x00007FFA79F65000-memory.dmp

Filesize
2.0MB

Download
memory/3808-3-0x00007FFA79D70000-0x00007FFA79F65000-memory.dmp

Filesize
2.0MB

Download

© 2018-2025

Terms | Privacy