5328d5f480f89cf93fe4f578facaa9622f36e802c436ed20b9d83e11b98700d3 | Triage

Analysis

max time kernel
93s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
16-12-2024 22:33

Sharing

Report Analysis Logs

General

Target

Release/Newtonsoft.Json.xml
Size

693KB
MD5

f414b3f68fe7c4f094b8fe8382f858c9
SHA1

66ee1b3266fcedde433b392156ab4a24262b2f34
SHA256

2d46b37b086d6848af5f021d2d7a40581ce78aadd8ee39d309aee4771a0eeccf
SHA512

19b2feb40c2e9d4d20d9a21f88f6ecea773060c056b8cbbd21a6eec41486dc5fc101e6c31129b0d53466d04709bcd4ed777058ddfb02532242b43e253a7b24bd
SSDEEP

6144:XqqUmk/RikeaG0rH3jGHdl0/InHHpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO185QA:DUq

Score

1^/10

Malware Config

Signatures

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Release\Newtonsoft.Json.xml"
1⤵
PID:4528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4528-0-0x00007FFED83B0000-0x00007FFED83C0000-memory.dmp

Filesize
64KB

Download
memory/4528-1-0x00007FFF183CD000-0x00007FFF183CE000-memory.dmp

Filesize
4KB

Download
memory/4528-2-0x00007FFF18330000-0x00007FFF18525000-memory.dmp

Filesize
2.0MB

Download
memory/4528-3-0x00007FFF18330000-0x00007FFF18525000-memory.dmp

Filesize
2.0MB

Download