Analysis

  • max time kernel
    148s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-12-2024 22:33

General

  • Target

    Release/MahApps.Metro.xml

  • Size

    373KB

  • MD5

    0c8bce16598497ef3057e11ec1993707

  • SHA1

    ce3695594d2ac344630c4486761770b89221522e

  • SHA256

    5e95cbccf4d2132109d55bef3bb49c6c83920a20fa99cc1a3c5e26234a58052e

  • SHA512

    7080facff2734d2c24fa1948dd60aec8a6ec70f6a252e8aee672b5532ee0431a7699a2371ea390af71893ae7b3c4843a57ed50fc4407b2632763ede713a91aab

  • SSDEEP

    6144:Bm9j36hRyWTBKcqsjYCGGEauE72mJjAD51GA:Bm9jLGA

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Release\MahApps.Metro.xml"
    1⤵
      PID:1576

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1576-0-0x00007FFD7BBD0000-0x00007FFD7BBE0000-memory.dmp

      Filesize

      64KB

    • memory/1576-1-0x00007FFDBBBED000-0x00007FFDBBBEE000-memory.dmp

      Filesize

      4KB

    • memory/1576-3-0x00007FFDBBB50000-0x00007FFDBBD45000-memory.dmp

      Filesize

      2.0MB

    • memory/1576-2-0x00007FFDBBB50000-0x00007FFDBBD45000-memory.dmp

      Filesize

      2.0MB

    • memory/1576-4-0x00007FFDBBB50000-0x00007FFDBBD45000-memory.dmp

      Filesize

      2.0MB