39eed41a282105d827a5ed1c6bd0e50e5b69d8535f80c2e67aeb2f0da72e1628 | Triage

Submit
Reports

Overview

overview

8

Static

static

1

Payload/Ma...32.png

windows7-x64

3

Payload/Ma...32.png

windows10-2004-x64

3

Payload/Ma...38.png

windows7-x64

3

Payload/Ma...38.png

windows10-2004-x64

3

Payload/Ma...48.png

windows7-x64

3

Payload/Ma...48.png

windows10-2004-x64

3

Payload/Ma...72.png

windows7-x64

3

Payload/Ma...72.png

windows10-2004-x64

3

Payload/Ma...t.json

windows7-x64

3

Payload/Ma...t.json

windows10-2004-x64

3

Payload/Ma...up.css

windows7-x64

3

Payload/Ma...up.css

windows10-2004-x64

7

Payload/Ma...es.xml

windows7-x64

3

Payload/Ma...es.xml

windows10-2004-x64

1

Payload/Ma...pi.cer

windows7-x64

8

Payload/Ma...pi.cer

windows10-2004-x64

8

Payload/Ma...ck.mp4

windows7-x64

1

Payload/Ma...ck.mp4

windows10-2004-x64

6

Payload/Ma.../c.wav

windows7-x64

1

Payload/Ma.../c.wav

windows10-2004-x64

6

Payload/Ma...er.cer

windows7-x64

8

Payload/Ma...er.cer

windows10-2004-x64

8

Payload/Ma...vision

windows7-x64

3

Payload/Ma...vision

windows10-2004-x64

3

Payload/Ma...eo.mov

windows7-x64

1

Payload/Ma...eo.mov

windows10-2004-x64

6

Payload/Ma...al.mp4

windows7-x64

1

Payload/Ma...al.mp4

windows10-2004-x64

6

Resubmissions

15/10/2024, 23:54

241015-3x4fvsxemq 8

15/10/2024, 23:51

241015-3v719sxdrl 7

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15/10/2024, 23:54

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

Payload/Mabz.app/PlugIns/CAREx.appex/images/toolbar-icon-32.png

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

Payload/Mabz.app/PlugIns/CAREx.appex/images/toolbar-icon-32.png

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Payload/Mabz.app/PlugIns/CAREx.appex/images/toolbar-icon-38.png

Resource

win7-20241010-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

Payload/Mabz.app/PlugIns/CAREx.appex/images/toolbar-icon-38.png

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Payload/Mabz.app/PlugIns/CAREx.appex/images/toolbar-icon-48.png

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

Payload/Mabz.app/PlugIns/CAREx.appex/images/toolbar-icon-48.png

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Payload/Mabz.app/PlugIns/CAREx.appex/images/toolbar-icon-72.png

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

Payload/Mabz.app/PlugIns/CAREx.appex/images/toolbar-icon-72.png

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

Payload/Mabz.app/PlugIns/CAREx.appex/manifest.json

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral10

Sample

Payload/Mabz.app/PlugIns/CAREx.appex/manifest.json

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Payload/Mabz.app/PlugIns/CAREx.appex/popup.css

Resource

win7-20241010-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

Payload/Mabz.app/PlugIns/CAREx.appex/popup.css

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

Payload/Mabz.app/_CodeSignature/CodeResources.xml

Resource

win7-20240903-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

Payload/Mabz.app/_CodeSignature/CodeResources.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Payload/Mabz.app/api.cer

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

Payload/Mabz.app/api.cer

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Payload/Mabz.app/back.mp4

Resource

win7-20240729-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

Payload/Mabz.app/back.mp4

Resource

win10v2004-20241007-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral19

Sample

Payload/Mabz.app/c.wav

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

Payload/Mabz.app/c.wav

Resource

win10v2004-20241007-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral21

Sample

Payload/Mabz.app/cer.cer

Resource

win7-20241010-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

Payload/Mabz.app/cer.cer

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

Payload/Mabz.app/embedded.mobileprovision

Resource

win7-20241010-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

Payload/Mabz.app/embedded.mobileprovision

Resource

win10v2004-20241007-en

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral25

Sample

Payload/Mabz.app/onVideo.mov

Resource

win7-20240729-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

Payload/Mabz.app/onVideo.mov

Resource

win10v2004-20241007-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral27

Sample

Payload/Mabz.app/tutorial.mp4

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral28

Sample

Payload/Mabz.app/tutorial.mp4

Resource

win10v2004-20241007-en

windows10-2004-x64

8 signatures

150 seconds

Report Analysis Logs

General

Target

Payload/Mabz.app/_CodeSignature/CodeResources.xml
Size

11KB
MD5

a2a62b525d590df0152aa8daaea33766
SHA1

ffbc98739fab40b71b8bd50793f22fe2bcde75e8
SHA256

d55aad32de5aadff881b11b331b9c9e00e27d1eb83db10228c2cc669e51ae7c3
SHA512

42fbf0a552a78892c74443c64c45232e5d9d98ba3e06cb554f462151635ff2f2087f938a37c678ab058032e622bcb52c684f000550a4e2677dd11e7a48df21f1
SSDEEP

192:XYo5fKKQ06VB02MZHDr2W4H0MFVvT533hLG56:oAA08BrAPOVvV33hC56

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Payload\Mabz.app\_CodeSignature\CodeResources.xml"
1⤵
PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2888-0-0x00007FFE01B50000-0x00007FFE01B60000-memory.dmp

Filesize
64KB

Download
memory/2888-1-0x00007FFE41B6D000-0x00007FFE41B6E000-memory.dmp

Filesize
4KB

Download
memory/2888-3-0x00007FFE41AD0000-0x00007FFE41CC5000-memory.dmp

Filesize
2.0MB

Download
memory/2888-2-0x00007FFE41AD0000-0x00007FFE41CC5000-memory.dmp

Filesize
2.0MB

Download
memory/2888-4-0x00007FFE41AD0000-0x00007FFE41CC5000-memory.dmp

Filesize
2.0MB

Download

© 2018-2025

Terms | Privacy