e96a0c1bc5f720d7f0a53f72e5bb424163c943c24a437b1065957a79f5872675 | Triage

Submit
Reports

Overview

overview

Static

static

3

nj230708full.pdf.exe

windows7-x64

nj230708full.pdf.exe

windows10-2004-x64

.data

windows7-x64

3

.data

windows10-2004-x64

3

.rdata

windows7-x64

3

.rdata

windows10-2004-x64

3

.reloc

windows7-x64

3

.reloc

windows10-2004-x64

3

.rsrc/DIALOG/105

windows7-x64

1

.rsrc/DIALOG/105

windows10-2004-x64

1

.rsrc/DIALOG/106

windows7-x64

1

.rsrc/DIALOG/106

windows10-2004-x64

1

.rsrc/DIALOG/111

windows7-x64

1

.rsrc/DIALOG/111

windows10-2004-x64

1

.rsrc/GROUP_ICON/103

windows7-x64

1

.rsrc/GROUP_ICON/103

windows10-2004-x64

1

.rsrc/ICON/1.png

windows7-x64

3

.rsrc/ICON/1.png

windows10-2004-x64

3

.rsrc/ICON/2.ico

windows7-x64

3

.rsrc/ICON/2.ico

windows10-2004-x64

3

.rsrc/ICON/3.ico

windows7-x64

3

.rsrc/ICON/3.ico

windows10-2004-x64

3

.rsrc/MANIFEST/1.xml

windows7-x64

3

.rsrc/MANIFEST/1.xml

windows10-2004-x64

1

.text

windows7-x64

3

.text

windows10-2004-x64

3

CERTIFICATE

windows7-x64

1

CERTIFICATE

windows10-2004-x64

1

[0]

windows7-x64

1

[0]

windows10-2004-x64

1

[1]

windows7-x64

1

[1]

windows10-2004-x64

1

Resubmissions

16-12-2024 09:53

241216-lw48bsvpfy 10

16-12-2024 09:15

241216-k739qsvmgp 10

Analysis

max time kernel
94s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
16-12-2024 09:15

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

nj230708full.pdf.exe

Resource

win7-20240903-en

asyncrat stormkitty discovery rat stealer

windows7-x64

20 signatures

150 seconds

Behavioral task

behavioral2

Sample

nj230708full.pdf.exe

Resource

win10v2004-20241007-en

asyncrat stormkitty discovery rat stealer

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral3

Sample

.data

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral4

Sample

.data

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

.rdata

Resource

win7-20241010-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

.rdata

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

.reloc

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral8

Sample

.reloc

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

.rsrc/DIALOG/105

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

.rsrc/DIALOG/105

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

.rsrc/DIALOG/106

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

.rsrc/DIALOG/106

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

.rsrc/DIALOG/111

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

.rsrc/DIALOG/111

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

.rsrc/GROUP_ICON/103

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

.rsrc/GROUP_ICON/103

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

.rsrc/ICON/1.png

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

.rsrc/ICON/1.png

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

.rsrc/ICON/2.ico

Resource

win7-20241010-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

.rsrc/ICON/2.ico

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

.rsrc/ICON/3.ico

Resource

win7-20241023-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

.rsrc/ICON/3.ico

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

.rsrc/MANIFEST/1.xml

Resource

win7-20241010-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral24

Sample

.rsrc/MANIFEST/1.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

.text

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

.text

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

CERTIFICATE

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

CERTIFICATE

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

[0]

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

[0]

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

[1]

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

[1]

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

.rsrc/MANIFEST/1.xml
Size

726B
MD5

8ac7761540a25f0e446671e95051ad9d
SHA1

dc2cbe444228a356272452dcda6a5f4f58bec4f7
SHA256

46e35d3bb4e0d1dd59f3321fa8b908e7202b9bdf70151f941d58f9bee9c0ba67
SHA512

7375e939af102200af9facde9a02296f074f06ca0e155b763f51f0bf0c41b66140d6eceaf720194650cb3bd4e5376d94a36bc9fc42fccdb1942894b9d13a1a93

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\.rsrc\MANIFEST\1.xml"
1⤵
PID:4872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4872-0-0x00007FFFA928D000-0x00007FFFA928E000-memory.dmp

Filesize
4KB

Download
memory/4872-1-0x00007FFF69270000-0x00007FFF69280000-memory.dmp

Filesize
64KB

Download
memory/4872-2-0x00007FFFA91F0000-0x00007FFFA93E5000-memory.dmp

Filesize
2.0MB

Download
memory/4872-3-0x00007FFFA91F0000-0x00007FFFA93E5000-memory.dmp

Filesize
2.0MB

Download

© 2018-2024

Terms | Privacy