Overview
overview
10Static
static
7a5ca7aaf8b...ec.apk
android-9-x86
10a5ca7aaf8b...ec.apk
android-10-x64
10a5ca7aaf8b...ec.apk
android-11-x64
10SFTi.ps1
windows7-x64
1SFTi.ps1
windows10-2004-x64
1actionsQueue.js
windows7-x64
1actionsQueue.js
windows10-2004-x64
1mraid.js
windows7-x64
1mraid.js
windows10-2004-x64
1omsdk-v1.js
windows7-x64
1omsdk-v1.js
windows10-2004-x64
1shape_01.xml
windows7-x64
1shape_01.xml
windows10-2004-x64
3shape_02.xml
windows7-x64
1shape_02.xml
windows10-2004-x64
3shape_03.xml
windows7-x64
1shape_03.xml
windows10-2004-x64
3shape_04.xml
windows7-x64
1shape_04.xml
windows10-2004-x64
3shape_05.xml
windows7-x64
1shape_05.xml
windows10-2004-x64
3shape_06.xml
windows7-x64
1shape_06.xml
windows10-2004-x64
3shape_07.xml
windows7-x64
1shape_07.xml
windows10-2004-x64
3shape_08.xml
windows7-x64
1shape_08.xml
windows10-2004-x64
3shape_09.xml
windows7-x64
1shape_09.xml
windows10-2004-x64
3shape_10.xml
windows7-x64
1shape_10.xml
windows10-2004-x64
3shape_11.xml
windows7-x64
1Analysis
-
max time kernel
143s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
07-08-2023 20:32
Static task
static1
Behavioral task
behavioral1
Sample
a5ca7aaf8b5324b1414760517bef1517527f952cd1c2fac907c2f83d2e3e4bec.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
a5ca7aaf8b5324b1414760517bef1517527f952cd1c2fac907c2f83d2e3e4bec.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral3
Sample
a5ca7aaf8b5324b1414760517bef1517527f952cd1c2fac907c2f83d2e3e4bec.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral4
Sample
SFTi.ps1
Resource
win7-20230712-en
Behavioral task
behavioral5
Sample
SFTi.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral6
Sample
actionsQueue.js
Resource
win7-20230712-en
Behavioral task
behavioral7
Sample
actionsQueue.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral8
Sample
mraid.js
Resource
win7-20230712-en
Behavioral task
behavioral9
Sample
mraid.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral10
Sample
omsdk-v1.js
Resource
win7-20230712-en
Behavioral task
behavioral11
Sample
omsdk-v1.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral12
Sample
shape_01.xml
Resource
win7-20230712-en
Behavioral task
behavioral13
Sample
shape_01.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral14
Sample
shape_02.xml
Resource
win7-20230712-en
Behavioral task
behavioral15
Sample
shape_02.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral16
Sample
shape_03.xml
Resource
win7-20230712-en
Behavioral task
behavioral17
Sample
shape_03.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral18
Sample
shape_04.xml
Resource
win7-20230712-en
Behavioral task
behavioral19
Sample
shape_04.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral20
Sample
shape_05.xml
Resource
win7-20230712-en
Behavioral task
behavioral21
Sample
shape_05.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral22
Sample
shape_06.xml
Resource
win7-20230712-en
Behavioral task
behavioral23
Sample
shape_06.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral24
Sample
shape_07.xml
Resource
win7-20230712-en
Behavioral task
behavioral25
Sample
shape_07.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral26
Sample
shape_08.xml
Resource
win7-20230712-en
Behavioral task
behavioral27
Sample
shape_08.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral28
Sample
shape_09.xml
Resource
win7-20230712-en
Behavioral task
behavioral29
Sample
shape_09.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral30
Sample
shape_10.xml
Resource
win7-20230712-en
Behavioral task
behavioral31
Sample
shape_10.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral32
Sample
shape_11.xml
Resource
win7-20230712-en
General
-
Target
shape_02.xml
-
Size
871B
-
MD5
b1f4cc6d1c954e73cc6e7d8b47c4db8f
-
SHA1
986ea9addedb45a0d3c8c6c70a636e870959b79d
-
SHA256
0b0c35ce63044f7756cf201f5978f44c439805e524c365ae9949994347487b79
-
SHA512
77d46d25ddf91c010f69ebad82800575b4cb0be4bc5e8199bd5d877a2e6a624e0f455268d8f26aaae2f5180a3c2b6dbe8bb782017c6e342960c1e7a26ae43d64
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3152 4828 WerFault.exe 78
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\shape_02.xml"1⤵PID:4828
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4828 -s 4722⤵
- Program crash
PID:3152
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4828 -ip 48281⤵PID:4884