Overview
overview
10Static
static
10ee6aec48e1...8e.apk
android-9-x86
7ee6aec48e1...8e.apk
android-10-x64
4ee6aec48e1...8e.apk
android-11-x64
7AndroidClo...in.ttf
windows7-x64
3AndroidClo...in.ttf
windows10-2004-x64
7Roboto-Bold.ttf
windows7-x64
3Roboto-Bold.ttf
windows10-2004-x64
7Roboto-Light.ttf
windows7-x64
3Roboto-Light.ttf
windows10-2004-x64
7android-ic...me.ttf
windows7-x64
3android-ic...me.ttf
windows10-2004-x64
7backward
windows7-x64
1backward
windows10-2004-x64
1crashlytic...erties
windows7-x64
3crashlytic...erties
windows10-2004-x64
3zone.tab
windows7-x64
3zone.tab
windows10-2004-x64
3Resubmissions
29-05-2023 01:11
230529-bj2assha72 1027-05-2023 19:22
230527-x3jqrach68 1027-05-2023 19:19
230527-x1ph8adc8s 1006-05-2023 03:47
230506-ecc66sab7y 10Analysis
-
max time kernel
31s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
27-05-2023 19:22
Behavioral task
behavioral1
Sample
ee6aec48e19191ba6efc4c65ff45a88e.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
ee6aec48e19191ba6efc4c65ff45a88e.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
ee6aec48e19191ba6efc4c65ff45a88e.apk
Resource
android-x64-arm64-20220823-en
Behavioral task
behavioral4
Sample
AndroidClockMono-Thin.ttf
Resource
win7-20230220-en
Behavioral task
behavioral5
Sample
AndroidClockMono-Thin.ttf
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
Roboto-Bold.ttf
Resource
win7-20230220-en
Behavioral task
behavioral7
Sample
Roboto-Bold.ttf
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
Roboto-Light.ttf
Resource
win7-20230220-en
Behavioral task
behavioral9
Sample
Roboto-Light.ttf
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
android-iconify-fontawesome.ttf
Resource
win7-20230220-en
Behavioral task
behavioral11
Sample
android-iconify-fontawesome.ttf
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
backward
Resource
win7-20230220-en
Behavioral task
behavioral13
Sample
backward
Resource
win10v2004-20230221-en
Behavioral task
behavioral14
Sample
crashlytics-build.properties
Resource
win7-20230220-en
Behavioral task
behavioral15
Sample
crashlytics-build.properties
Resource
win10v2004-20230220-en
Behavioral task
behavioral16
Sample
zone.tab
Resource
win7-20230220-en
Behavioral task
behavioral17
Sample
zone.tab
Resource
win10v2004-20230220-en
General
-
Target
AndroidClockMono-Thin.ttf
-
Size
5KB
-
MD5
865726afe8b0b3e604da03819a4573bf
-
SHA1
9c32d4dccb41b1405677f26aecfaefba33f9fd81
-
SHA256
36b8ff47ed75e57f3a4268d3733f80156aec8f92265ef0a48516f21454098222
-
SHA512
16bfee3afc9e9d7e910cc79405b3ad1ad90dea534035df75a81fe17a51e49945cf48d7fc37823e43504dd8810d96313054583c04e695522954bceac57feb86d4
-
SSDEEP
96:u639wRWDqUIy5nlQVZWgTtT00suKlR9ys3Eln1WcDG/0Lhti6G4:h9feynuVJp00FY9Yl1Wcq/0Lhti6/
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 948 wrote to memory of 1028 948 cmd.exe 29 PID 948 wrote to memory of 1028 948 cmd.exe 29 PID 948 wrote to memory of 1028 948 cmd.exe 29