Analysis

  • max time kernel
    147s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-11-2024 17:24

General

  • Target

    locales/resources/Data/Managed/UnityEngine.UmbraModule.xml

  • Size

    344B

  • MD5

    56eaef949504a8ad24ea91d6b5962bdd

  • SHA1

    ef172e1ef08b25c9c0bdff731e84622a48f25efc

  • SHA256

    f359041abc32e0e9f2667b875f1b44343c247832aa7fe9a75f17a5e614eb32b4

  • SHA512

    858d57489491322b06dafc805a37a6043e222cae8dcc49bb37865c312995bf3678da39849541374595d53e7f53916e8b8b7639b0ea5fc81b4071ba076564d9d3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\locales\resources\Data\Managed\UnityEngine.UmbraModule.xml"
    1⤵
      PID:1424

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1424-0-0x00007FFDB7C8D000-0x00007FFDB7C8E000-memory.dmp

      Filesize

      4KB

    • memory/1424-1-0x00007FFD77C70000-0x00007FFD77C80000-memory.dmp

      Filesize

      64KB

    • memory/1424-2-0x00007FFDB7BF0000-0x00007FFDB7DE5000-memory.dmp

      Filesize

      2.0MB

    • memory/1424-3-0x00007FFDB7BF0000-0x00007FFDB7DE5000-memory.dmp

      Filesize

      2.0MB

    • memory/1424-4-0x00007FFDB7BF0000-0x00007FFDB7DE5000-memory.dmp

      Filesize

      2.0MB