Analysis
- max time kernel
32s - max time network
25s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
26/10/2026, 21:34
General
- Target ad0901902684092260000017d.xml
- Size 34KB
- Sample261026-1e7dpay1by
- SHA256 6d9ff93b23b485716c1137a2719815c55a0ecbe4b18c910603bb50d100acb5ae
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\ad0901902684092260000017d.xml"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3176-0-0x00007FFB85800000-0x00007FFB85810000-memory.dmp
memory/3176-3-0x00007FFBC581F000-0x00007FFBC5820000-memory.dmp
memory/3176-2-0x00007FFB85800000-0x00007FFB85810000-memory.dmp
memory/3176-1-0x00007FFB85800000-0x00007FFB85810000-memory.dmp
memory/3176-5-0x00007FFB85800000-0x00007FFB85810000-memory.dmp
memory/3176-4-0x00007FFBC56C0000-0x00007FFBC5923000-memory.dmp
memory/3176-6-0x00007FFB85800000-0x00007FFB85810000-memory.dmp
memory/3176-7-0x00007FFBC56C0000-0x00007FFBC5923000-memory.dmp
memory/3176-8-0x00007FFBC56C0000-0x00007FFBC5923000-memory.dmp
memory/3176-9-0x00007FFBC56C0000-0x00007FFBC5923000-memory.dmp
memory/3176-10-0x00007FFBC56C0000-0x00007FFBC5923000-memory.dmp
memory/3176-12-0x00007FFBC56C0000-0x00007FFBC5923000-memory.dmp
memory/3176-11-0x00007FFBC56C0000-0x00007FFBC5923000-memory.dmp
memory/3176-16-0x00007FFB85800000-0x00007FFB85810000-memory.dmp
memory/3176-15-0x00007FFB85800000-0x00007FFB85810000-memory.dmp
memory/3176-13-0x00007FFB85800000-0x00007FFB85810000-memory.dmp
memory/3176-14-0x00007FFB85800000-0x00007FFB85810000-memory.dmp
memory/3176-18-0x00007FFBC56C0000-0x00007FFBC5923000-memory.dmp
memory/3176-17-0x00007FFBC56C0000-0x00007FFBC5923000-memory.dmp
memory/3176-19-0x00007FFBC56C0000-0x00007FFBC5923000-memory.dmp