Analysis

  • max time kernel
    91s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2024 23:18

General

  • Target

    geode/resources/geode.loader/APISheet.xml

  • Size

    16KB

  • MD5

    a165e6f847feaf3401a9e80e6834e1be

  • SHA1

    4fdb46be3c617dab728e54f08b1a30265981ce93

  • SHA256

    7e03e949448fc9bee5bf968548919a1bb8b9bd4496e83bbde05bffd3994f5d5a

  • SHA512

    c4ad97f08dfe8cc4a12655d719c51fc46c86a595751a18400887c679991a078b4fc861dc1c88aad1e1b17e84ec860b61c51d53f38449b915b52cced2aef17047

  • SSDEEP

    96:CyQco4FGcNc2cFczXchcVPccFc/c0c1YcYcF0cBc6zcFcbc3cCcZzs4cgcDBScT8:XXQv/Dva5oLZj2

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\geode\resources\geode.loader\APISheet.xml"
    1⤵
      PID:2456

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2456-1-0x00007FFF0EE0D000-0x00007FFF0EE0E000-memory.dmp

      Filesize

      4KB

    • memory/2456-0-0x00007FFECEDF0000-0x00007FFECEE00000-memory.dmp

      Filesize

      64KB

    • memory/2456-2-0x00007FFF0ED70000-0x00007FFF0EF65000-memory.dmp

      Filesize

      2.0MB

    • memory/2456-3-0x00007FFF0ED70000-0x00007FFF0EF65000-memory.dmp

      Filesize

      2.0MB

    • memory/2456-4-0x00007FFF0ED70000-0x00007FFF0EF65000-memory.dmp

      Filesize

      2.0MB