Overview
overview
10Static
static
7a5ca7aaf8b...ec.apk
android-9-x86
10a5ca7aaf8b...ec.apk
android-10-x64
10a5ca7aaf8b...ec.apk
android-11-x64
10SFTi.ps1
windows7-x64
1SFTi.ps1
windows10-2004-x64
1actionsQueue.js
windows7-x64
1actionsQueue.js
windows10-2004-x64
1mraid.js
windows7-x64
1mraid.js
windows10-2004-x64
1omsdk-v1.js
windows7-x64
1omsdk-v1.js
windows10-2004-x64
1shape_01.xml
windows7-x64
1shape_01.xml
windows10-2004-x64
3shape_02.xml
windows7-x64
1shape_02.xml
windows10-2004-x64
3shape_03.xml
windows7-x64
1shape_03.xml
windows10-2004-x64
3shape_04.xml
windows7-x64
1shape_04.xml
windows10-2004-x64
3shape_05.xml
windows7-x64
1shape_05.xml
windows10-2004-x64
3shape_06.xml
windows7-x64
1shape_06.xml
windows10-2004-x64
3shape_07.xml
windows7-x64
1shape_07.xml
windows10-2004-x64
3shape_08.xml
windows7-x64
1shape_08.xml
windows10-2004-x64
3shape_09.xml
windows7-x64
1shape_09.xml
windows10-2004-x64
3shape_10.xml
windows7-x64
1shape_10.xml
windows10-2004-x64
3shape_11.xml
windows7-x64
1Analysis
-
max time kernel
142s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
07-08-2023 20:32
Static task
static1
Behavioral task
behavioral1
Sample
a5ca7aaf8b5324b1414760517bef1517527f952cd1c2fac907c2f83d2e3e4bec.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
a5ca7aaf8b5324b1414760517bef1517527f952cd1c2fac907c2f83d2e3e4bec.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral3
Sample
a5ca7aaf8b5324b1414760517bef1517527f952cd1c2fac907c2f83d2e3e4bec.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral4
Sample
SFTi.ps1
Resource
win7-20230712-en
Behavioral task
behavioral5
Sample
SFTi.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral6
Sample
actionsQueue.js
Resource
win7-20230712-en
Behavioral task
behavioral7
Sample
actionsQueue.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral8
Sample
mraid.js
Resource
win7-20230712-en
Behavioral task
behavioral9
Sample
mraid.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral10
Sample
omsdk-v1.js
Resource
win7-20230712-en
Behavioral task
behavioral11
Sample
omsdk-v1.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral12
Sample
shape_01.xml
Resource
win7-20230712-en
Behavioral task
behavioral13
Sample
shape_01.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral14
Sample
shape_02.xml
Resource
win7-20230712-en
Behavioral task
behavioral15
Sample
shape_02.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral16
Sample
shape_03.xml
Resource
win7-20230712-en
Behavioral task
behavioral17
Sample
shape_03.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral18
Sample
shape_04.xml
Resource
win7-20230712-en
Behavioral task
behavioral19
Sample
shape_04.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral20
Sample
shape_05.xml
Resource
win7-20230712-en
Behavioral task
behavioral21
Sample
shape_05.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral22
Sample
shape_06.xml
Resource
win7-20230712-en
Behavioral task
behavioral23
Sample
shape_06.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral24
Sample
shape_07.xml
Resource
win7-20230712-en
Behavioral task
behavioral25
Sample
shape_07.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral26
Sample
shape_08.xml
Resource
win7-20230712-en
Behavioral task
behavioral27
Sample
shape_08.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral28
Sample
shape_09.xml
Resource
win7-20230712-en
Behavioral task
behavioral29
Sample
shape_09.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral30
Sample
shape_10.xml
Resource
win7-20230712-en
Behavioral task
behavioral31
Sample
shape_10.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral32
Sample
shape_11.xml
Resource
win7-20230712-en
General
-
Target
shape_04.xml
-
Size
828B
-
MD5
07377bd1a13bbec7af35e95af89b4245
-
SHA1
d2059d04e0072ba94d4267e8c220e56662422fec
-
SHA256
8a2ef1ac06c3071986fdc48a0e16934acc6cbbe73b8196d33d3c17d15798ef29
-
SHA512
8860e198ca78c09d135afc0852dc995ddfa9fa104c2dcfa55de4f20a31f134ebcc6af285d2112e8db7c0934607917dff62349806c62f29cf755b8ed3f63ddb51
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3712 4828 WerFault.exe 55
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\shape_04.xml"1⤵PID:4828
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4828 -s 4482⤵
- Program crash
PID:3712
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4828 -ip 48281⤵PID:4916