f5130b7f56e9585fec62e97af6e46eabfdb74cb465d999663b88066bb8f1f060

Submit
Reports

Overview

overview

Static

static

Debug/Micr...es.xml

windows7-x64

Debug/Micr...es.xml

windows10-2004-x64

Debug/Mona...xclude

windows7-x64

Debug/Mona...xclude

windows10-2004-x64

Debug/Mona...ar.ttf

windows7-x64

Debug/Mona...ar.ttf

windows10-2004-x64

Debug/Mona....woff2

windows7-x64

Debug/Mona....woff2

windows10-2004-x64

Debug/Mona...on.ttf

windows7-x64

Debug/Mona...on.ttf

windows10-2004-x64

Debug/Nexa..._1.zip

windows7-x64

Debug/Nexa..._1.zip

windows10-2004-x64

Debug/Nexa..._1.zip

windows7-x64

Debug/Nexa..._1.zip

windows10-2004-x64

Debug/Nexa..._1.zip

windows7-x64

Debug/Nexa..._1.zip

windows10-2004-x64

Debug/Nexa..._1.zip

windows7-x64

Debug/Nexa..._1.zip

windows10-2004-x64

Debug/Nexa..._1.zip

windows7-x64

Debug/Nexa..._1.zip

windows10-2004-x64

Debug/Nexa...s.json

windows7-x64

Debug/Nexa...s.json

windows10-2004-x64

Debug/Nexa...af.hyb

windows7-x64

Debug/Nexa...af.hyb

windows10-2004-x64

Debug/Nexa...as.hyb

windows7-x64

Debug/Nexa...as.hyb

windows10-2004-x64

Debug/Nexa...be.hyb

windows7-x64

Debug/Nexa...be.hyb

windows10-2004-x64

Debug/Nexa...bg.hyb

windows7-x64

Debug/Nexa...bg.hyb

windows10-2004-x64

Debug/Nexa...bn.hyb

windows7-x64

Debug/Nexa...bn.hyb

windows10-2004-x64

Analysis

max time kernel
141s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09-12-2024 23:59

Sharing

Copy URL

Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Debug/Microsoft.Bcl.AsyncInterfaces.xml

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

Debug/Microsoft.Bcl.AsyncInterfaces.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Debug/Monaco/.git/info/exclude

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Debug/Monaco/.git/info/exclude

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Debug/Monaco/Fonts/JetBrainsMono-Regular.ttf

Resource

win7-20241023-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

Debug/Monaco/Fonts/JetBrainsMono-Regular.ttf

Resource

win10v2004-20241007-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

Debug/Monaco/Fonts/JetBrainsMono-Regular.woff2

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral8

Sample

Debug/Monaco/Fonts/JetBrainsMono-Regular.woff2

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Debug/Monaco/vs/base/browser/ui/codicons/codicon/codicon.ttf

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

Debug/Monaco/vs/base/browser/ui/codicons/codicon/codicon.ttf

Resource

win10v2004-20241007-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

Debug/Nexam.exe.WebView2/EBWebView/component_crx_cache/fppmbhmldokgmleojlplaaodlkibgikh_1.zip

Resource

win7-20241023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

Debug/Nexam.exe.WebView2/EBWebView/component_crx_cache/fppmbhmldokgmleojlplaaodlkibgikh_1.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

Debug/Nexam.exe.WebView2/EBWebView/component_crx_cache/kpfehajjjbbcifeehjgfgnabifknmdad_1.zip

Resource

win7-20240708-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

Debug/Nexam.exe.WebView2/EBWebView/component_crx_cache/kpfehajjjbbcifeehjgfgnabifknmdad_1.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

Debug/Nexam.exe.WebView2/EBWebView/component_crx_cache/ndikpojcjlepofdkaaldkinkjbeeebkl_1.zip

Resource

win7-20241010-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

Debug/Nexam.exe.WebView2/EBWebView/component_crx_cache/ndikpojcjlepofdkaaldkinkjbeeebkl_1.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

Debug/Nexam.exe.WebView2/EBWebView/component_crx_cache/oankkpibpaokgecfckkdkgaoafllipag_1.zip

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

Debug/Nexam.exe.WebView2/EBWebView/component_crx_cache/oankkpibpaokgecfckkdkgaoafllipag_1.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

Debug/Nexam.exe.WebView2/EBWebView/component_crx_cache/ohckeflnhegojcjlcpbfpciadgikcohk_1.zip

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

Debug/Nexam.exe.WebView2/EBWebView/component_crx_cache/ohckeflnhegojcjlcpbfpciadgikcohk_1.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

Debug/Nexam.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/_metadata/verified_contents.json

Resource

win7-20241023-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral22

Sample

Debug/Nexam.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/_metadata/verified_contents.json

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

Debug/Nexam.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-af.hyb

Resource

win7-20241010-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

Debug/Nexam.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-af.hyb

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

Debug/Nexam.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-as.hyb

Resource

win7-20240708-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral26

Sample

Debug/Nexam.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-as.hyb

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

Debug/Nexam.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-be.hyb

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral28

Sample

Debug/Nexam.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-be.hyb

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

Debug/Nexam.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-bg.hyb

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral30

Sample

Debug/Nexam.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-bg.hyb

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

Debug/Nexam.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-bn.hyb

Resource

win7-20241023-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral32

Sample

Debug/Nexam.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-bn.hyb

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

Debug/Microsoft.Bcl.AsyncInterfaces.xml
Size

30KB
MD5

f2f0dff684b90ee0d5588f541617d8e9
SHA1

507be00960cd145c6f46c60ca8088e2e0b69701f
SHA256

2bca72654bac72cd4a20905452584f1f07e2bbfc5ab84e46f5855b621a06ccc4
SHA512

2fc09e130326a40aa63268f07dbef01f6f73df881ae18f7cf14cad6af0960ef6f86926d2d3a851cd00f02c0ed08481ed75672aefc2bee943c4ef5f8676797fc1
SSDEEP

384:XgOpngSae6jWuTPP/xM2fB8qnmltJ5XZzRzgqW81Fu3DRmfCh7sE+siDBQsFJIs+:0FQJNTG7TIcXn

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Debug\Microsoft.Bcl.AsyncInterfaces.xml"
1⤵
PID:3080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3080-0-0x00007FFC15450000-0x00007FFC15460000-memory.dmp

Filesize
64KB

Download
memory/3080-1-0x00007FFC5546D000-0x00007FFC5546E000-memory.dmp

Filesize
4KB

Download
memory/3080-2-0x00007FFC553D0000-0x00007FFC555C5000-memory.dmp

Filesize
2.0MB

Download
memory/3080-3-0x00007FFC553D0000-0x00007FFC555C5000-memory.dmp

Filesize
2.0MB

Download