Overview
overview
7Static
static
7com.flavio...om.apk
android-9-x86
1com.flavio...om.apk
android-10-x64
1AndroidClo...in.ttf
windows7-x64
3AndroidClo...in.ttf
windows10-2004-x64
7Roboto-Bold.ttf
windows7-x64
3Roboto-Bold.ttf
windows10-2004-x64
7Roboto-Light.ttf
windows7-x64
3Roboto-Light.ttf
windows10-2004-x64
7RobotoCond...ic.ttf
windows7-x64
3RobotoCond...ic.ttf
windows10-2004-x64
7RobotoCond...ht.ttf
windows7-x64
3RobotoCond...ht.ttf
windows10-2004-x64
7RobotoCond...ic.ttf
windows7-x64
3RobotoCond...ic.ttf
windows10-2004-x64
7RobotoCond...ar.ttf
windows7-x64
3RobotoCond...ar.ttf
windows10-2004-x64
7backward
windows7-x64
1backward
windows10-2004-x64
1changelog_en.txt
windows7-x64
1changelog_en.txt
windows10-2004-x64
1changelog_es.txt
windows7-x64
1changelog_es.txt
windows10-2004-x64
1cinelog_en.txt
windows7-x64
1cinelog_en.txt
windows10-2004-x64
1cinelog_es.txt
windows7-x64
1cinelog_es.txt
windows10-2004-x64
1compat0_htc_831c.xml
windows7-x64
1compat0_htc_831c.xml
windows10-2004-x64
1compat0_ht...vw.xml
windows7-x64
1compat0_ht...vw.xml
windows10-2004-x64
1compat0_ht...6b.xml
windows7-x64
1compat0_ht...6b.xml
windows10-2004-x64
1Analysis
-
max time kernel
26s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20230703-en -
resource tags
arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system -
submitted
07-07-2023 19:29
Static task
static1
Behavioral task
behavioral1
Sample
com.flavionet.android.camera.pro_5.2.9_paid-www.apkhere.com.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
com.flavionet.android.camera.pro_5.2.9_paid-www.apkhere.com.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral3
Sample
AndroidClockMono-Thin.ttf
Resource
win7-20230703-en
Behavioral task
behavioral4
Sample
AndroidClockMono-Thin.ttf
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
Roboto-Bold.ttf
Resource
win7-20230703-en
Behavioral task
behavioral6
Sample
Roboto-Bold.ttf
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
Roboto-Light.ttf
Resource
win7-20230703-en
Behavioral task
behavioral8
Sample
Roboto-Light.ttf
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
RobotoCondensed-Italic.ttf
Resource
win7-20230703-en
Behavioral task
behavioral10
Sample
RobotoCondensed-Italic.ttf
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
RobotoCondensed-Light.ttf
Resource
win7-20230703-en
Behavioral task
behavioral12
Sample
RobotoCondensed-Light.ttf
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
RobotoCondensed-LightItalic.ttf
Resource
win7-20230703-en
Behavioral task
behavioral14
Sample
RobotoCondensed-LightItalic.ttf
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
RobotoCondensed-Regular.ttf
Resource
win7-20230703-en
Behavioral task
behavioral16
Sample
RobotoCondensed-Regular.ttf
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
backward
Resource
win7-20230703-en
Behavioral task
behavioral18
Sample
backward
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
changelog_en.txt
Resource
win7-20230703-en
Behavioral task
behavioral20
Sample
changelog_en.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
changelog_es.txt
Resource
win7-20230703-en
Behavioral task
behavioral22
Sample
changelog_es.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
cinelog_en.txt
Resource
win7-20230703-en
Behavioral task
behavioral24
Sample
cinelog_en.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
cinelog_es.txt
Resource
win7-20230703-en
Behavioral task
behavioral26
Sample
cinelog_es.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
compat0_htc_831c.xml
Resource
win7-20230703-en
Behavioral task
behavioral28
Sample
compat0_htc_831c.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
compat0_htc_htc6525lvw.xml
Resource
win7-20230703-en
Behavioral task
behavioral30
Sample
compat0_htc_htc6525lvw.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
compat0_htc_htc_0p6b.xml
Resource
win7-20230703-en
Behavioral task
behavioral32
Sample
compat0_htc_htc_0p6b.xml
Resource
win10v2004-20230703-en
General
-
Target
RobotoCondensed-Regular.ttf
-
Size
111KB
-
MD5
be428581959db666a5458d01fca26505
-
SHA1
5dc4ab26970eb043b4c8f3cefad7adafb48caf6f
-
SHA256
a654c5782e77a49b63c5d8bbb06a5788733e39eadb82d44f994cb906ef84ef8c
-
SHA512
de10b82fb406a0c3d49e8777ba4d6314cdc824140a765577ee6ab7029501f35760c8934ee49160837fedc187a1adcc65bb563e4af9631d37d51666a7ec739ec1
-
SSDEEP
3072:ZXutTfsyiPQmqrMPnBpbBi0+Mss5lBvsssssskNP:8syi5qrMiMss5lBvssssssaP
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2344 wrote to memory of 1720 2344 cmd.exe 29 PID 2344 wrote to memory of 1720 2344 cmd.exe 29 PID 2344 wrote to memory of 1720 2344 cmd.exe 29
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\RobotoCondensed-Regular.ttf1⤵
- Suspicious use of WriteProcessMemory
PID:2344 -
C:\Windows\System32\fontview.exe"C:\Windows\System32\fontview.exe" C:\Users\Admin\AppData\Local\Temp\RobotoCondensed-Regular.ttf2⤵PID:1720
-