Overview
overview
3Static
static
3unrar.zip
windows7-x64
3unrar.zip
windows10-2004-x64
1Resource/A...e.admx
windows7-x64
3Resource/A...e.admx
windows10-2004-x64
3Resource/A...s.admx
windows7-x64
3Resource/A...s.admx
windows10-2004-x64
3Resource/A...t.admx
windows7-x64
3Resource/A...t.admx
windows10-2004-x64
3Resource/A...me.xml
windows7-x64
3Resource/A...me.xml
windows10-2004-x64
1Resource/A...r.admx
windows7-x64
3Resource/A...r.admx
windows10-2004-x64
3Resource/A...r.admx
windows7-x64
3Resource/A...r.admx
windows10-2004-x64
3Resource/A...gs.xml
windows7-x64
3Resource/A...gs.xml
windows10-2004-x64
1Resource/A...y.admx
windows7-x64
3Resource/A...y.admx
windows10-2004-x64
3Resource/B...s.admx
windows7-x64
3Resource/B...s.admx
windows10-2004-x64
3Resource/Bits.admx
windows7-x64
3Resource/Bits.admx
windows10-2004-x64
3Resource/C...e.admx
windows7-x64
3Resource/C...e.admx
windows10-2004-x64
3Resource/C...tity-H
windows7-x64
1Resource/C...tity-H
windows10-2004-x64
1Resource/C...tity-V
windows7-x64
1Resource/C...tity-V
windows10-2004-x64
1Resource/C...BK-EUC
windows7-x64
1Resource/C...BK-EUC
windows10-2004-x64
1Resource/C...TF16-H
windows7-x64
1Resource/C...TF16-H
windows10-2004-x64
1Analysis
-
max time kernel
415s -
max time network
419s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
15-09-2024 00:14
Static task
static1
Behavioral task
behavioral1
Sample
unrar.zip
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
unrar.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Resource/ActiveXInstallService.admx
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Resource/ActiveXInstallService.admx
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Resource/AddRemovePrograms.admx
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Resource/AddRemovePrograms.admx
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Resource/AppCompat.admx
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Resource/AppCompat.admx
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Resource/AppXRuntime.xml
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Resource/AppXRuntime.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Resource/AppxPackageManager.admx
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Resource/AppxPackageManager.admx
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Resource/AttachmentManager.admx
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Resource/AttachmentManager.admx
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Resource/AuditSettings.xml
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Resource/AuditSettings.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Resource/AutoPlay.admx
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Resource/AutoPlay.admx
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Resource/Biometrics.admx
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Resource/Biometrics.admx
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Resource/Bits.admx
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
Resource/Bits.admx
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Resource/CEIPEnable.admx
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
Resource/CEIPEnable.admx
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Resource/CMap/Identity-H
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Resource/CMap/Identity-H
Resource
win10v2004-20240910-en
Behavioral task
behavioral27
Sample
Resource/CMap/Identity-V
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
Resource/CMap/Identity-V
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Resource/CMap/UCS2-GBK-EUC
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Resource/CMap/UCS2-GBK-EUC
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Resource/CMap/UniKS-UTF16-H
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
Resource/CMap/UniKS-UTF16-H
Resource
win10v2004-20240802-en
General
-
Target
Resource/AuditSettings.xml
-
Size
1KB
-
MD5
9a36a7410b4ef98b36da553e050b9788
-
SHA1
4ba6e5225a7c5daf30f4947b9288b708e8e557e8
-
SHA256
ebac316580540b7ee8e399f890470527e456f2c6a103fcc899f4b2442d8e69f7
-
SHA512
7cd81f2bedde51bca3a1f5a0889870be71ef521e5c331f1c8ba4ce97bf604adfff6cafa0fe707ed55df62bc340c45baa189e3d07f20a466ee7254f3c6abe6b74
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Resource\AuditSettings.xml"1⤵PID:752