b2ec54685b1596259320fe92f11cb2f081372b6d80676ba95f278b03ad12493a | Triage

Resubmissions

04/10/2024, 18:21

241004-wzbqasyfkp 6

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
04/10/2024, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

lunar-client-qt-2.0.0/res/icons/cog.xml
Size

1KB
MD5

1a984a1a4664614275c427a6a194c477
SHA1

0b05f4e57c3e297fa9d1731103a53f4540d2be28
SHA256

9fed7a36e0cbf21d8bc141178b1d1ded682930431446f4138b06ed69a8ad4a5c
SHA512

0b55eabc77ec80816bd64d61f9f6c133de4a822482e385a246e56e7963bf9c54a6d4f93961f7f8efe33749920b4ba6981fd290325a757fbc7738654aff4b3394

Score

1^/10

Malware Config

Signatures

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\lunar-client-qt-2.0.0\res\icons\cog.xml"
1⤵
PID:1824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1824-0-0x00007FFA28290000-0x00007FFA282A0000-memory.dmp

Filesize
64KB

Download
memory/1824-1-0x00007FFA682AD000-0x00007FFA682AE000-memory.dmp

Filesize
4KB

Download
memory/1824-2-0x00007FFA68210000-0x00007FFA68405000-memory.dmp

Filesize
2.0MB

Download
memory/1824-3-0x00007FFA68210000-0x00007FFA68405000-memory.dmp

Filesize
2.0MB

Download
memory/1824-4-0x00007FFA68210000-0x00007FFA68405000-memory.dmp

Filesize
2.0MB

Download