Overview
overview
10Static
static
7f1bcf62ae8...98.apk
android-9-x86
10f1bcf62ae8...98.apk
android-10-x64
10f1bcf62ae8...98.apk
android-11-x64
10appboy-htm...ent.js
windows7-x64
1appboy-htm...ent.js
windows10-2004-x64
1shape_1.xml
windows7-x64
1shape_1.xml
windows10-2004-x64
3shape_10.xml
windows7-x64
1shape_10.xml
windows10-2004-x64
3shape_11.xml
windows7-x64
1shape_11.xml
windows10-2004-x64
3shape_12.xml
windows7-x64
1shape_12.xml
windows10-2004-x64
3shape_13.xml
windows7-x64
1shape_13.xml
windows10-2004-x64
3shape_14.xml
windows7-x64
1shape_14.xml
windows10-2004-x64
3shape_15.xml
windows7-x64
1shape_15.xml
windows10-2004-x64
3shape_16.xml
windows7-x64
1shape_16.xml
windows10-2004-x64
3shape_17.xml
windows7-x64
1shape_17.xml
windows10-2004-x64
3shape_18.xml
windows7-x64
1shape_18.xml
windows10-2004-x64
3shape_19.xml
windows7-x64
1shape_19.xml
windows10-2004-x64
3shape_2.xml
windows7-x64
1shape_2.xml
windows10-2004-x64
3shape_20.xml
windows7-x64
1shape_20.xml
windows10-2004-x64
3shape_21.xml
windows7-x64
1Analysis
-
max time kernel
143s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
07-08-2023 20:33
Static task
static1
Behavioral task
behavioral1
Sample
f1bcf62ae8af19e38cfa19809e5a65cddd9b638cce72598f053774dda76bf398.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
f1bcf62ae8af19e38cfa19809e5a65cddd9b638cce72598f053774dda76bf398.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral3
Sample
f1bcf62ae8af19e38cfa19809e5a65cddd9b638cce72598f053774dda76bf398.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral4
Sample
appboy-html-in-app-message-javascript-component.js
Resource
win7-20230712-en
Behavioral task
behavioral5
Sample
appboy-html-in-app-message-javascript-component.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral6
Sample
shape_1.xml
Resource
win7-20230712-en
Behavioral task
behavioral7
Sample
shape_1.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral8
Sample
shape_10.xml
Resource
win7-20230712-en
Behavioral task
behavioral9
Sample
shape_10.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral10
Sample
shape_11.xml
Resource
win7-20230712-en
Behavioral task
behavioral11
Sample
shape_11.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral12
Sample
shape_12.xml
Resource
win7-20230712-en
Behavioral task
behavioral13
Sample
shape_12.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral14
Sample
shape_13.xml
Resource
win7-20230712-en
Behavioral task
behavioral15
Sample
shape_13.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral16
Sample
shape_14.xml
Resource
win7-20230712-en
Behavioral task
behavioral17
Sample
shape_14.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral18
Sample
shape_15.xml
Resource
win7-20230712-en
Behavioral task
behavioral19
Sample
shape_15.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral20
Sample
shape_16.xml
Resource
win7-20230712-en
Behavioral task
behavioral21
Sample
shape_16.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral22
Sample
shape_17.xml
Resource
win7-20230712-en
Behavioral task
behavioral23
Sample
shape_17.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral24
Sample
shape_18.xml
Resource
win7-20230712-en
Behavioral task
behavioral25
Sample
shape_18.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral26
Sample
shape_19.xml
Resource
win7-20230712-en
Behavioral task
behavioral27
Sample
shape_19.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral28
Sample
shape_2.xml
Resource
win7-20230712-en
Behavioral task
behavioral29
Sample
shape_2.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral30
Sample
shape_20.xml
Resource
win7-20230712-en
Behavioral task
behavioral31
Sample
shape_20.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral32
Sample
shape_21.xml
Resource
win7-20230712-en
General
-
Target
shape_1.xml
-
Size
471B
-
MD5
d088bfa4b1e206c8c5ed88405855f767
-
SHA1
1cc0925ff6a38384f466560cc86b1afcadbeb15c
-
SHA256
2f7924e1f2537622b8617a051765bd4fe57272e9f14a37f4bbe127269c522434
-
SHA512
d1ceda7c098a5934f1808d9b89bcb7fa8809a1f084e915ea0c12ee9070b854ae9d625eaccee3af3db5d50a07438eeb346b01ea73463fe5e34b988a7663321b79
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1608 4164 WerFault.exe MSOXMLED.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\shape_1.xml"1⤵PID:4164
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4164 -s 4482⤵
- Program crash
PID:1608
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4164 -ip 41641⤵PID:4980