Analysis

  • max time kernel
    91s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-11-2024 17:24

General

  • Target

    locales/resources/Data/Managed/UnityEngine.VRModule.xml

  • Size

    19KB

  • MD5

    bf6a9c82e1ba41a6d4186c5dbfbf5a1e

  • SHA1

    a0d3b9f290635697763212ac8eb3b029fad8ec85

  • SHA256

    052a3b4dc4aebfcf6ae16d041267fa2525e641fdd5c597dd1ac0363c609c7f34

  • SHA512

    416f9507f694a467f76639d5290264f8dcef93491c4c176b1347fe3f3381f34b76c127121ae9f10ff707aadb90bce7181319607e7f5804530829738ba139a2ce

  • SSDEEP

    192:gqHCPw3RYDWrAP/27827p27Bdu9FQQndFXNF6CSIc6qKK26ZR:/iPw3RIUAPAX2B2FrbYtIc6qKp6ZR

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\locales\resources\Data\Managed\UnityEngine.VRModule.xml"
    1⤵
      PID:1892

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1892-1-0x00007FFAF81AD000-0x00007FFAF81AE000-memory.dmp

      Filesize

      4KB

    • memory/1892-0-0x00007FFAB8190000-0x00007FFAB81A0000-memory.dmp

      Filesize

      64KB

    • memory/1892-3-0x00007FFAF8110000-0x00007FFAF8305000-memory.dmp

      Filesize

      2.0MB

    • memory/1892-2-0x00007FFAF8110000-0x00007FFAF8305000-memory.dmp

      Filesize

      2.0MB

    • memory/1892-4-0x00007FFAF8110000-0x00007FFAF8305000-memory.dmp

      Filesize

      2.0MB