Analysis

  • max time kernel
    141s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/09/2024, 17:50

General

  • Target

    captainsim-aircraft-m774/SimObjects/Airplanes/CS_B777F_GE110B1/model/m774_404.xml

  • Size

    31KB

  • MD5

    235afcc25e6f7c8c5d9b01a7776af677

  • SHA1

    896ce6e231da6e619e8963661788ed81194b6731

  • SHA256

    0d5b603c6ce47cb46130886b31a73f905b5cc3e0d79023dd9725303ff5a76e9a

  • SHA512

    e09cf61e7ec92bc7501905c94de6c5cfe8b7ec033826cc39126835560b1de9a687fffa98b06da8f548d2926f2364e92625afc3c97c8a8769bf364693463b5931

  • SSDEEP

    384:dTNg0f/EZwaMjjsAzU8VA1A7ArAUAxACAXAgASABTho3z+g:dT8qqOscDiJwnZy

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\captainsim-aircraft-m774\SimObjects\Airplanes\CS_B777F_GE110B1\model\m774_404.xml"
    1⤵
      PID:3932

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3932-0-0x00007FFD54770000-0x00007FFD54780000-memory.dmp

      Filesize

      64KB

    • memory/3932-1-0x00007FFD9478D000-0x00007FFD9478E000-memory.dmp

      Filesize

      4KB

    • memory/3932-3-0x00007FFD946F0000-0x00007FFD948E5000-memory.dmp

      Filesize

      2.0MB

    • memory/3932-2-0x00007FFD946F0000-0x00007FFD948E5000-memory.dmp

      Filesize

      2.0MB

    • memory/3932-4-0x00007FFD946F0000-0x00007FFD948E5000-memory.dmp

      Filesize

      2.0MB