Analysis
- max time kernel
148s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
15/10/2026, 19:55
General
- Target 3D/_rels/3dmodel.model.xml
- Size 539B
- Sample261015-ynf7raea44
- SHA256 274bdee494112a34a632bf8abb3779710cc49130c63f24311e718c2a7595cbe4
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\3D\_rels\3dmodel.model.xml"1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4896-0-0x00007FF9620C0000-0x00007FF9620D0000-memory.dmp
memory/4896-3-0x00007FF9A20DF000-0x00007FF9A20E0000-memory.dmp
memory/4896-2-0x00007FF9620C0000-0x00007FF9620D0000-memory.dmp
memory/4896-4-0x00007FF9620C0000-0x00007FF9620D0000-memory.dmp
memory/4896-1-0x00007FF9620C0000-0x00007FF9620D0000-memory.dmp
memory/4896-5-0x00007FF9620C0000-0x00007FF9620D0000-memory.dmp
memory/4896-7-0x00007FF9A1F80000-0x00007FF9A21E3000-memory.dmp
memory/4896-8-0x00007FF9A1F80000-0x00007FF9A21E3000-memory.dmp
memory/4896-6-0x00007FF9A1F80000-0x00007FF9A21E3000-memory.dmp
memory/4896-9-0x00007FF9A1F80000-0x00007FF9A21E3000-memory.dmp
memory/4896-10-0x00007FF9A1F80000-0x00007FF9A21E3000-memory.dmp
memory/4896-11-0x00007FF9A1F80000-0x00007FF9A21E3000-memory.dmp
memory/4896-13-0x00007FF9A1F80000-0x00007FF9A21E3000-memory.dmp
memory/4896-12-0x00007FF9A1F80000-0x00007FF9A21E3000-memory.dmp
memory/4896-14-0x00007FF9620C0000-0x00007FF9620D0000-memory.dmp
memory/4896-16-0x00007FF9620C0000-0x00007FF9620D0000-memory.dmp
memory/4896-18-0x00007FF9A1F80000-0x00007FF9A21E3000-memory.dmp
memory/4896-15-0x00007FF9620C0000-0x00007FF9620D0000-memory.dmp
memory/4896-17-0x00007FF9620C0000-0x00007FF9620D0000-memory.dmp