88de739cac5442354a41df7ff4e8fc4f223a8ff9ff87b59c13df607b491ec679

Submit
Reports

Overview

overview

Static

static

ManagerOff...in.zip

windows7-x64

ManagerOff...in.zip

windows10-2004-x64

ManagerOff...ool.py

windows7-x64

ManagerOff...ool.py

windows10-2004-x64

ManagerOff...ll.ps1

windows7-x64

ManagerOff...ll.ps1

windows10-2004-x64

ManagerOff...L/.txt

windows7-x64

ManagerOff...L/.txt

windows10-2004-x64

ManagerOff...13.xml

windows7-x64

ManagerOff...13.xml

windows10-2004-x64

ManagerOff...16.xml

windows7-x64

ManagerOff...16.xml

windows10-2004-x64

ManagerOff...19.xml

windows7-x64

ManagerOff...19.xml

windows10-2004-x64

ManagerOff...21.xml

windows7-x64

ManagerOff...21.xml

windows10-2004-x64

ManagerOff...ICENSE

windows7-x64

ManagerOff...ICENSE

windows10-2004-x64

ManagerOff...DME.md

windows7-x64

ManagerOff...DME.md

windows10-2004-x64

ManagerOff...ce.bat

windows7-x64

ManagerOff...ce.bat

windows10-2004-x64

ManagerOff...tup.py

windows7-x64

ManagerOff...tup.py

windows10-2004-x64

Analysis

max time kernel
1151s
max time network
1144s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
16-12-2024 11:57

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

ManagerOfficeTool-main.zip

Resource

win7-20240729-en

execution

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral2

Sample

ManagerOfficeTool-main.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

1800 seconds

Behavioral task

behavioral3

Sample

ManagerOfficeTool-main/Files/DeploymentScriptTool.py

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral4

Sample

ManagerOfficeTool-main/Files/DeploymentScriptTool.py

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

1800 seconds

Behavioral task

behavioral5

Sample

ManagerOfficeTool-main/Files/Install.ps1

Resource

win7-20240708-en

execution

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral6

Sample

ManagerOfficeTool-main/Files/Install.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

6 signatures

1800 seconds

Behavioral task

behavioral7

Sample

ManagerOfficeTool-main/Files/ODT_ConfigXML/.txt

Resource

win7-20241010-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

ManagerOfficeTool-main/Files/ODT_ConfigXML/.txt

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral9

Sample

ManagerOfficeTool-main/Files/ODT_ConfigXML/OfficeConfig2013.xml

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral10

Sample

ManagerOfficeTool-main/Files/ODT_ConfigXML/OfficeConfig2013.xml

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

7 signatures

1800 seconds

Behavioral task

behavioral11

Sample

ManagerOfficeTool-main/Files/ODT_ConfigXML/OfficeConfig2016.xml

Resource

win7-20241010-en

discovery

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral12

Sample

ManagerOfficeTool-main/Files/ODT_ConfigXML/OfficeConfig2016.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

ManagerOfficeTool-main/Files/ODT_ConfigXML/OfficeConfig2019.xml

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral14

Sample

ManagerOfficeTool-main/Files/ODT_ConfigXML/OfficeConfig2019.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

ManagerOfficeTool-main/Files/ODT_ConfigXML/OfficeConfig2021.xml

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral16

Sample

ManagerOfficeTool-main/Files/ODT_ConfigXML/OfficeConfig2021.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral17

Sample

ManagerOfficeTool-main/LICENSE

Resource

win7-20240903-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral18

Sample

ManagerOfficeTool-main/LICENSE

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral19

Sample

ManagerOfficeTool-main/README.md

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral20

Sample

ManagerOfficeTool-main/README.md

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

1800 seconds

Behavioral task

behavioral21

Sample

ManagerOfficeTool-main/RunInstallOffice.bat

Resource

win7-20240903-en

execution

windows7-x64

4 signatures

1800 seconds

Behavioral task

behavioral22

Sample

ManagerOfficeTool-main/RunInstallOffice.bat

Resource

win10v2004-20241007-en

discovery execution

windows10-2004-x64

14 signatures

1800 seconds

Behavioral task

behavioral23

Sample

ManagerOfficeTool-main/Setup.py

Resource

win7-20240729-en

discovery

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral24

Sample

ManagerOfficeTool-main/Setup.py

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

1800 seconds

Report Analysis Logs

General

Target

ManagerOfficeTool-main/Files/ODT_ConfigXML/OfficeConfig2021.xml
Size

730B
MD5

aa66aaab6f1f1a2fee296a8caf94e82f
SHA1

93989da3a925efd1b233899e9ddd1c04a935fa02
SHA256

37c86b93b586ecd292ad0603e01ba171a592a3426b79a155e0add9b6e624a970
SHA512

d316bfecc278b19ac79ce2391df800c31171927d20e60d2baaa638ca173623b54e1e76db95488cecd483e2cd24c4341ff7e09266de0f2740580bcbff62399ec2

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\ManagerOfficeTool-main\Files\ODT_ConfigXML\OfficeConfig2021.xml"
1⤵
PID:4720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4720-0-0x00007FFD35050000-0x00007FFD35060000-memory.dmp

Filesize
64KB

Download
memory/4720-1-0x00007FFD72980000-0x00007FFD72A1D000-memory.dmp

Filesize
628KB

Download