170740ce72172c7d607b46f58d391bff57ac1cb7090625fa53e73b2798437466 | Triage

Resubmissions

02-08-2024 18:55

240802-xkzn9a1bkg 3

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
02-08-2024 18:55

Sharing

Report Analysis Logs

General

Target

Release/System.Runtime.CompilerServices.Unsafe.xml
Size

20KB
MD5

c782e92abbfc0531226f735c6ac56498
SHA1

2586fdbeb6d1e11d4cecd5b3e8387a18c7b4d350
SHA256

39c2d4a63a186d423e9c866f4d3e9a6acba0103398f20baf8b92a38744894215
SHA512

a12b6807695c9c626de9602abc6df72bcc5e869a29c7111e956034f321436e7c50ea36ed5ec5b6f93a639ae0f7aea93953e91ae557bf423a749b036c7252a7b9
SSDEEP

384:Y/uXukudyvmB0fmkcdZKyQe1EyriJriurs8rsF9vVwFaFDJOeOtOEKFzUxRkj1r:Y/ApEwmafmkcdZbQe1EyriJriurs8rsR

Score

1^/10

Malware Config

Signatures

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Release\System.Runtime.CompilerServices.Unsafe.xml"
1⤵
PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2384-1-0x00007FFB7F62D000-0x00007FFB7F62E000-memory.dmp

Filesize
4KB

Download
memory/2384-0-0x00007FFB3F610000-0x00007FFB3F620000-memory.dmp

Filesize
64KB

Download
memory/2384-2-0x00007FFB7F590000-0x00007FFB7F785000-memory.dmp

Filesize
2.0MB

Download
memory/2384-3-0x00007FFB7F590000-0x00007FFB7F785000-memory.dmp

Filesize
2.0MB

Download
memory/2384-4-0x00007FFB7F590000-0x00007FFB7F785000-memory.dmp

Filesize
2.0MB

Download