Overview
overview
9Static
static
9TheWorldPo...me.dll
windows7-x64
3TheWorldPo...me.dll
windows10-2004-x64
3TheWorldPo...ent.js
windows7-x64
1TheWorldPo...ent.js
windows10-2004-x64
1TheWorldPo...ld.dll
windows7-x64
1TheWorldPo...ld.dll
windows10-2004-x64
1TheWorldPo...mo.dll
windows7-x64
3TheWorldPo...mo.dll
windows10-2004-x64
3TheWorldPo...32.dll
windows7-x64
1TheWorldPo...32.dll
windows10-2004-x64
1TheWorldPo...dt.dll
windows7-x64
3TheWorldPo...dt.dll
windows10-2004-x64
3TheWorldPo...ad.dll
windows7-x64
1TheWorldPo...ad.dll
windows10-2004-x64
1TheWorldPo...ad.dll
windows7-x64
8TheWorldPo...ad.dll
windows10-2004-x64
8TheWorldPo...rl.dll
windows7-x64
1TheWorldPo...rl.dll
windows10-2004-x64
1TheWorldPo...er.dll
windows7-x64
1TheWorldPo...er.dll
windows10-2004-x64
3TheWorldPo...ex.dll
windows7-x64
1TheWorldPo...ex.dll
windows10-2004-x64
1TheWorldPo...cp.dll
windows7-x64
1TheWorldPo...cp.dll
windows10-2004-x64
3TheWorldPo...it.dll
windows7-x64
1TheWorldPo...it.dll
windows10-2004-x64
1TheWorldPo...it.dll
windows7-x64
1TheWorldPo...it.dll
windows10-2004-x64
1TheWorldPo...ei.dll
windows7-x64
1TheWorldPo...ei.dll
windows10-2004-x64
3TheWorldPo...ces.js
windows7-x64
1TheWorldPo...ces.js
windows10-2004-x64
1Analysis
-
max time kernel
89s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 07:12
Behavioral task
behavioral1
Sample
TheWorldPortable/Application/6.2.0.128/chrome.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
TheWorldPortable/Application/6.2.0.128/chrome.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
TheWorldPortable/Application/6.2.0.128/chrome_100_percent.js
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
TheWorldPortable/Application/6.2.0.128/chrome_100_percent.js
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
TheWorldPortable/Application/6.2.0.128/chrome_child.dll
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
TheWorldPortable/Application/6.2.0.128/chrome_child.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
TheWorldPortable/Application/6.2.0.128/ffmpegsumo.dll
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
TheWorldPortable/Application/6.2.0.128/ffmpegsumo.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
TheWorldPortable/Application/6.2.0.128/gcswf32.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
TheWorldPortable/Application/6.2.0.128/gcswf32.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
TheWorldPortable/Application/6.2.0.128/icudt.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
TheWorldPortable/Application/6.2.0.128/icudt.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
TheWorldPortable/Application/6.2.0.128/plugins/np115upload.dll
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
TheWorldPortable/Application/6.2.0.128/plugins/np115upload.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
TheWorldPortable/Application/6.2.0.128/plugins/np360upload.dll
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
TheWorldPortable/Application/6.2.0.128/plugins/np360upload.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
TheWorldPortable/Application/6.2.0.128/plugins/npAliSecCtrl.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
TheWorldPortable/Application/6.2.0.128/plugins/npAliSecCtrl.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
TheWorldPortable/Application/6.2.0.128/plugins/npUploader.dll
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
TheWorldPortable/Application/6.2.0.128/plugins/npUploader.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
TheWorldPortable/Application/6.2.0.128/plugins/npactivex.dll
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
TheWorldPortable/Application/6.2.0.128/plugins/npactivex.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
TheWorldPortable/Application/6.2.0.128/plugins/npalidcp.dll
Resource
win7-20220901-en
Behavioral task
behavioral24
Sample
TheWorldPortable/Application/6.2.0.128/plugins/npalidcp.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral25
Sample
TheWorldPortable/Application/6.2.0.128/plugins/npaliedit.dll
Resource
win7-20221111-en
Behavioral task
behavioral26
Sample
TheWorldPortable/Application/6.2.0.128/plugins/npaliedit.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral27
Sample
TheWorldPortable/Application/6.2.0.128/plugins/nptxftnWebKit.dll
Resource
win7-20221111-en
Behavioral task
behavioral28
Sample
TheWorldPortable/Application/6.2.0.128/plugins/nptxftnWebKit.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
TheWorldPortable/Application/6.2.0.128/plugins/npxunlei.dll
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
TheWorldPortable/Application/6.2.0.128/plugins/npxunlei.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral31
Sample
TheWorldPortable/Application/6.2.0.128/resources.js
Resource
win7-20221111-en
Behavioral task
behavioral32
Sample
TheWorldPortable/Application/6.2.0.128/resources.js
Resource
win10v2004-20220812-en
General
-
Target
TheWorldPortable/Application/6.2.0.128/icudt.dll
-
Size
5.6MB
-
MD5
54be2f096d4182d8cdc16a52681d91cf
-
SHA1
9b0fb7dfda3ee4cd6821a2713a241699a657047e
-
SHA256
12e11bdb053fa3f6eb59828b5dda6b722713c26312ea60ea3b28efaa30f19216
-
SHA512
7801438d2bb505dfb9d6720fce85f7bf78f537bae3df9581d522d4305fad2305210a4f2fa3085d40b63cd397462fc759b013ce67a5a6b3e69c4b5f5d704919ea
-
SSDEEP
49152:rzT+jYw6+AZ0LNDhJVKQZTH+z45kmXGPFjsVtYvvPqyBz9tq80Xrsvliw0B:rHexx5hWtQYv3+807sgw0B
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5076 1100 WerFault.exe 56
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\TheWorldPortable\Application\6.2.0.128\icudt.dll,#11⤵PID:1100
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1100 -s 3282⤵
- Program crash
PID:5076
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 464 -p 1100 -ip 11001⤵PID:2972