Analysis

  • max time kernel
    94s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/01/2025, 18:32

General

  • Target
    .rsrc/MANIFEST/1.xml
  • Size 726B
  • Sample250106-w6xlcawkfl
  • SHA256 2bf05590410fb6b30494a3251789f0d8a4b9da7f3e87fe89b64cace1bc0a02cd
  • MD5 SHA1 SHA512
Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\.rsrc\MANIFEST\1.xml"
    1⤵
      PID:4660

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/4660-1-0x00007FFF540B0000-0x00007FFF540C0000-memory.dmp

          memory/4660-0-0x00007FFF940CD000-0x00007FFF940CE000-memory.dmp

          memory/4660-3-0x00007FFF94030000-0x00007FFF94225000-memory.dmp

          memory/4660-2-0x00007FFF94030000-0x00007FFF94225000-memory.dmp

          memory/4660-4-0x00007FFF94030000-0x00007FFF94225000-memory.dmp