Overview

overview

10

Static

static

3

Rebel.7z

windows7-x64

1

Rebel.7z

windows10-2004-x64

10

Rebel/Bin/...or.exe

windows7-x64

5

Rebel/Bin/...or.exe

windows10-2004-x64

5

Rebel/Bin/Rebel.dll

windows7-x64

1

Rebel/Bin/Rebel.dll

windows10-2004-x64

1

Rebel/Fast...ox.dll

windows7-x64

1

Rebel/Fast...ox.dll

windows10-2004-x64

1

Rebel/Fast...ox.xml

windows7-x64

3

Rebel/Fast...ox.xml

windows10-2004-x64

1

Rebel/ReadMe.txt

windows7-x64

1

Rebel/ReadMe.txt

windows10-2004-x64

1

Rebel/Rebe...ed.exe

windows7-x64

10

Rebel/Rebe...ed.exe

windows10-2004-x64

10

Rebel/Syst...om.dll

windows7-x64

1

Rebel/Syst...om.dll

windows10-2004-x64

1

Rebel/Syst...om.xml

windows7-x64

3

Rebel/Syst...om.xml

windows10-2004-x64

1

Analysis

  • max time kernel
    140s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-10-2024 12:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Rebel/System.CodeDom.xml

  • Size

    366KB

  • MD5

    91af6294c77371e6773c35cfa7edd068

  • SHA1

    0c24bfafb91ab69a3a7a4bfbd15a9c346341c487

  • SHA256

    92287105a0987fc6ea2404e799da13f2d57b228a1fa3039a6d0cded00d4344c5

  • SHA512

    bdfb5c13ee54b88d029bae6a65f932bcf27b1d71a5c373325b2e7484d21d49745c2f3983da85d50aeb6e31febbf0bfcb3cbe46415bae15877c20d54522b65904

  • SSDEEP

    1536:l2e3vRrYxV4Tm0/Y/LFC9YmXVT2Y3mBhuzRKqn/gCOIFnffP6Ks5ATTglg2PLaAR:lK+c9

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Rebel\System.CodeDom.xml"
    1⤵
      PID:4800

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4800-0-0x00007FF7DC3B0000-0x00007FF7DC3C0000-memory.dmp

      Filesize

      64KB

      Download

    • memory/4800-1-0x00007FF81C3CD000-0x00007FF81C3CE000-memory.dmp

      Filesize

      4KB

      Download

    • memory/4800-2-0x00007FF81C330000-0x00007FF81C525000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/4800-3-0x00007FF81C330000-0x00007FF81C525000-memory.dmp

      Filesize

      2.0MB

      Download