Overview

overview

10

Static

static

10

TOTAL.zip

windows7-x64

1

TOTAL.zip

windows10-2004-x64

1

CR9CK/CR9CK.exe

windows7-x64

10

CR9CK/CR9CK.exe

windows10-2004-x64

10

CR9CK/CR9CK.pdb

windows7-x64

3

CR9CK/CR9CK.pdb

windows10-2004-x64

3

CR9CK/prog...xe.xml

windows7-x64

1

CR9CK/prog...xe.xml

windows10-2004-x64

1

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-07-2024 14:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CR9CK/progress.exe.xml

  • Size

    161B

  • MD5

    c16b0746faa39818049fe38709a82c62

  • SHA1

    3fa322fe6ed724b1bc4fd52795428a36b7b8c131

  • SHA256

    d61bde901e7189cc97d45a1d4c4aa39d4c4de2b68419773ec774338506d659ad

  • SHA512

    cbcba899a067f8dc32cfcbd1779a6982d25955de91e1e02cee8eaf684a01b0dee3642c2a954903720ff6086de5a082147209868c03665c89f814c6219be2df7c

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\CR9CK\progress.exe.xml"
    1⤵
      PID:3508

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3508-0-0x00007FFF23970000-0x00007FFF23980000-memory.dmp

      Filesize

      64KB

      Download

    • memory/3508-1-0x00007FFF6398D000-0x00007FFF6398E000-memory.dmp

      Filesize

      4KB

      Download

    • memory/3508-2-0x00007FFF638F0000-0x00007FFF63AE5000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/3508-3-0x00007FFF638F0000-0x00007FFF63AE5000-memory.dmp

      Filesize

      2.0MB

      Download