Overview

overview

10

Static

static

1

Cryos Woofer.exe

windows10-2004-x64

10

.data

windows10-2004-x64

3

.rdata

windows10-2004-x64

3

.reloc

windows10-2004-x64

3

.rsrc/DIALOG/105

windows10-2004-x64

1

.rsrc/DIALOG/106

windows10-2004-x64

1

.rsrc/DIALOG/111

windows10-2004-x64

1

.rsrc/GROUP_ICON/103

windows10-2004-x64

1

.rsrc/ICON/1.png

windows10-2004-x64

3

.rsrc/ICON/2.png

windows10-2004-x64

3

.rsrc/MANIFEST/1.xml

windows10-2004-x64

1

.text

windows10-2004-x64

3

CERTIFICATE

windows10-2004-x64

1

[0]

windows10-2004-x64

1

[1]

windows10-2004-x64

1

Analysis

  • max time kernel
    93s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-12-2024 18:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    .rsrc/MANIFEST/1.xml

  • Size

    726B

  • MD5

    8ac7761540a25f0e446671e95051ad9d

  • SHA1

    dc2cbe444228a356272452dcda6a5f4f58bec4f7

  • SHA256

    46e35d3bb4e0d1dd59f3321fa8b908e7202b9bdf70151f941d58f9bee9c0ba67

  • SHA512

    7375e939af102200af9facde9a02296f074f06ca0e155b763f51f0bf0c41b66140d6eceaf720194650cb3bd4e5376d94a36bc9fc42fccdb1942894b9d13a1a93

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\.rsrc\MANIFEST\1.xml"
    1⤵
      PID:5064

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5064-1-0x00007FFC718ED000-0x00007FFC718EE000-memory.dmp

      Filesize

      4KB

      Download

    • memory/5064-0-0x00007FFC318D0000-0x00007FFC318E0000-memory.dmp

      Filesize

      64KB

      Download

    • memory/5064-3-0x00007FFC71850000-0x00007FFC71A45000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/5064-2-0x00007FFC71850000-0x00007FFC71A45000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/5064-4-0x00007FFC71850000-0x00007FFC71A45000-memory.dmp

      Filesize

      2.0MB

      Download