Overview

overview

10

Static

static

1

MilwaukeeRivers.exe

windows7-x64

10

MilwaukeeRivers.exe

windows10-2004-x64

10

.data

windows7-x64

3

.data

windows10-2004-x64

3

.rdata

windows7-x64

3

.rdata

windows10-2004-x64

3

.reloc

windows7-x64

3

.reloc

windows10-2004-x64

3

.rsrc/DIALOG/105

windows7-x64

1

.rsrc/DIALOG/105

windows10-2004-x64

1

.rsrc/DIALOG/106

windows7-x64

1

.rsrc/DIALOG/106

windows10-2004-x64

1

.rsrc/DIALOG/111

windows7-x64

1

.rsrc/DIALOG/111

windows10-2004-x64

1

.rsrc/GROUP_ICON/103

windows7-x64

1

.rsrc/GROUP_ICON/103

windows10-2004-x64

1

.rsrc/ICON/1.ico

windows7-x64

3

.rsrc/ICON/1.ico

windows10-2004-x64

3

.rsrc/MANIFEST/1.xml

windows7-x64

3

.rsrc/MANIFEST/1.xml

windows10-2004-x64

1

.rsrc/version.txt

windows7-x64

1

.rsrc/version.txt

windows10-2004-x64

1

.text

windows7-x64

3

.text

windows10-2004-x64

3

CERTIFICATE

windows7-x64

1

CERTIFICATE

windows10-2004-x64

1

[0]

windows7-x64

1

[0]

windows10-2004-x64

1

[1]

windows7-x64

1

[1]

windows10-2004-x64

1

Analysis

  • max time kernel
    95s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-11-2024 10:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    .rsrc/MANIFEST/1.xml

  • Size

    726B

  • MD5

    8ac7761540a25f0e446671e95051ad9d

  • SHA1

    dc2cbe444228a356272452dcda6a5f4f58bec4f7

  • SHA256

    46e35d3bb4e0d1dd59f3321fa8b908e7202b9bdf70151f941d58f9bee9c0ba67

  • SHA512

    7375e939af102200af9facde9a02296f074f06ca0e155b763f51f0bf0c41b66140d6eceaf720194650cb3bd4e5376d94a36bc9fc42fccdb1942894b9d13a1a93

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\.rsrc\MANIFEST\1.xml"
    1⤵
      PID:1328

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1328-1-0x00007FFA7C66D000-0x00007FFA7C66E000-memory.dmp

      Filesize

      4KB

      Download

    • memory/1328-0-0x00007FFA3C650000-0x00007FFA3C660000-memory.dmp

      Filesize

      64KB

      Download

    • memory/1328-2-0x00007FFA7C5D0000-0x00007FFA7C7C5000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/1328-3-0x00007FFA7C5D0000-0x00007FFA7C7C5000-memory.dmp

      Filesize

      2.0MB

      Download