Analysis

  • max time kernel
    92s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2024 23:18

General

  • Target

    geode/resources/geode.loader/EventSheet-hd.xml

  • Size

    1KB

  • MD5

    732790dbc88d1ce29b5304866067b833

  • SHA1

    3bff7d8db17a9895f5aab37a946d4cc05a809eb9

  • SHA256

    2f328b13098b78d8ff23cca587eb791f8f49370673837324f5c600dc7070d1ed

  • SHA512

    da212a50da0c4b93e780e5ae33952b6e5fe0c85d0d5a283ad0ae7cef391c0314ee6d57519cf8b8551345b46ea84669d7f7f0a8c447652217ad57fc139c28d143

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\geode\resources\geode.loader\EventSheet-hd.xml"
    1⤵
      PID:1848

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1848-0-0x00007FF851FF0000-0x00007FF852000000-memory.dmp

      Filesize

      64KB

    • memory/1848-1-0x00007FF89200D000-0x00007FF89200E000-memory.dmp

      Filesize

      4KB

    • memory/1848-2-0x00007FF891F70000-0x00007FF892165000-memory.dmp

      Filesize

      2.0MB

    • memory/1848-3-0x00007FF891F70000-0x00007FF892165000-memory.dmp

      Filesize

      2.0MB