b4fb522c3ace596c6464955c11a33f2de2fbc23a1eba91cbdcf3b4ced7e16413 | Triage

Analysis

max time kernel
91s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2024 23:18

Sharing

Report Analysis Logs

General

Target

geode/resources/geode.loader/BlankSheet-uhd.xml
Size

28KB
MD5

887084fee2fe22c876a9383df62954f0
SHA1

3cf3744abc89d21b4ca24c06712842f48a821818
SHA256

59a7533832e463e3e3a678fb9eb95705f0923f33d2106caa6449a1418324bd2d
SHA512

8662fdc1bacffd2822eed71f50c79de93d6bcf78d22f457edf113b1df6982c00615c43df0fb055b0a05f421096ffbd59c6b7d5164f31fbd4cbb03aae710521da
SSDEEP

384:BViNRnK3ID3idlL1WtkQ1gbjTlB7TqJTGPRfKpgzahuaL8qP:BViK/dlL128qP

Score

1^/10

Malware Config

Signatures

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\geode\resources\geode.loader\BlankSheet-uhd.xml"
1⤵
PID:3092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3092-1-0x00007FF9067AD000-0x00007FF9067AE000-memory.dmp

Filesize
4KB

Download
memory/3092-0-0x00007FF8C6790000-0x00007FF8C67A0000-memory.dmp

Filesize
64KB

Download
memory/3092-2-0x00007FF906710000-0x00007FF906905000-memory.dmp

Filesize
2.0MB

Download
memory/3092-3-0x00007FF906710000-0x00007FF906905000-memory.dmp

Filesize
2.0MB

Download
memory/3092-4-0x00007FF906710000-0x00007FF906905000-memory.dmp

Filesize
2.0MB

Download