Overview
overview
3Static
static
1A0TOFHD.pages
macos-10.15-amd64
1QuickLook/...il.png
windows10-2004-x64
1QuickLook/...il.png
windows11-ltsc_2024-x64
1buildVersi...ry.xml
windows10-2004-x64
3buildVersi...ry.xml
windows11-ltsc_2024-x64
1bullet_gbu...ay.png
windows10-2004-x64
1bullet_gbu...ay.png
windows11-ltsc_2024-x64
1index.xml
windows10-2004-x64
3index.xml
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
112s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/07/2026, 01:31
Static task
static1
Behavioral task
behavioral1
Sample
A0TOFHD.pages
Resource
macos-20250619-en
Behavioral task
behavioral2
Sample
QuickLook/Thumbnail.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
QuickLook/Thumbnail.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
buildVersionHistory.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
buildVersionHistory.xml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
bullet_gbutton_gray.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
bullet_gbutton_gray.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
index.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
index.xml
Resource
win11ltsc2024-20260709-en
General
- Target buildVersionHistory.xml
- Size 233B
- Sample260710-bxcvcsby5m
- SHA256 8ba66385e346f288e5bc52e6beb51a22a61ea4b5d4b368456989f45112cdaf8a
- MD5 0d3e8ba5db4063eb1c387eb7cad3c617
- SHA1 560e9befb4deb4f03cfd5563a9d87a4b21a060b7
- SHA512 3616750c88c3e314b45d548eccd7fe8274a83cdfea4eff4f74686c6c730d42f381f69c8f32e315b698f00c41e9d6d9cd8601b497da3ad03e1a045fc1db46de38
- TLSH T14DD0A7850554B87D04C096875B59D1555312D38E89B104FDA0D25C818B4B2A5273436E
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\buildVersionHistory.xml"1⤵PID:4120