Overview
overview
8Static
static
Evon/Evon.dll
windows7-x64
1Evon/Evon.dll
windows10-2004-x64
6Evon/Evon.exe
windows7-x64
1Evon/Evon.exe
windows10-2004-x64
8Evon/FluxAPI.dll
windows7-x64
1Evon/FluxAPI.dll
windows10-2004-x64
1Evon/KrnlAPI.dll
windows7-x64
1Evon/KrnlAPI.dll
windows10-2004-x64
1Evon/Oxygen API.dll
windows7-x64
1Evon/Oxygen API.dll
windows10-2004-x64
1Evon/runti...er.dll
windows7-x64
1Evon/runti...er.dll
windows10-2004-x64
1Evon/runti...er.dll
windows7-x64
1Evon/runti...er.dll
windows10-2004-x64
3Evon/runti...er.dll
windows7-x64
1Evon/runti...er.dll
windows10-2004-x64
3Analysis
-
max time kernel
91s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
24/09/2022, 10:17
Static task
static1
Behavioral task
behavioral1
Sample
Evon/Evon.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Evon/Evon.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Evon/Evon.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Evon/Evon.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Evon/FluxAPI.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
Evon/FluxAPI.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
Evon/KrnlAPI.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
Evon/KrnlAPI.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
Evon/Oxygen API.dll
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
Evon/Oxygen API.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
Evon/runtimes/win-arm64/native/WebView2Loader.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
Evon/runtimes/win-arm64/native/WebView2Loader.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
Evon/runtimes/win-x64/native/WebView2Loader.dll
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
Evon/runtimes/win-x64/native/WebView2Loader.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
Evon/runtimes/win-x86/native/WebView2Loader.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
Evon/runtimes/win-x86/native/WebView2Loader.dll
Resource
win10v2004-20220901-en
General
-
Target
Evon/runtimes/win-x64/native/WebView2Loader.dll
-
Size
134KB
-
MD5
3d9b43a2c4cd54902f418f5a0f68454e
-
SHA1
244ef7c672659d4201b38e288f16e29e52ffbe4b
-
SHA256
398067e286fba58e3ea2e5aaace0e17b17367fcbe8f6087ed10817737aefbc12
-
SHA512
d8802ed37324c9c1f9c81fde5ff1e964fceeaf30ea42b35eda621f9c9bdf46dfd811945595e219619557521446b29423d0b2cd7276d074fd88a1fd2095c48e1f
-
SSDEEP
3072:Q1Ua32yCHjjTrxvJ7KP+6hJug3esZTEEtnDzUwsramu86n:omyCDj31JGW6fCEt0Tir
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 768 4516 WerFault.exe 78
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Evon\runtimes\win-x64\native\WebView2Loader.dll,#11⤵PID:4516
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4516 -s 3282⤵
- Program crash
PID:768
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 4516 -ip 45161⤵PID:660