Overview
overview
10Static
static
7d1daa8dcbb...35.apk
android-9-x86
10d1daa8dcbb...35.apk
android-10-x64
10d1daa8dcbb...35.apk
android-11-x64
10EularsB_sub.xml
windows7-x64
1EularsB_sub.xml
windows10-2004-x64
3Factorial_sub.xml
windows7-x64
1Factorial_sub.xml
windows10-2004-x64
3Fraction_sub.xml
windows7-x64
1Fraction_sub.xml
windows10-2004-x64
3GreaterThanOr_sub.xml
windows7-x64
1GreaterThanOr_sub.xml
windows10-2004-x64
3Imaginary_num_sub.xml
windows7-x64
1Imaginary_num_sub.xml
windows10-2004-x64
3LessThanOr_sub.xml
windows7-x64
1LessThanOr_sub.xml
windows10-2004-x64
3Ln_sub.xml
windows7-x64
1Ln_sub.xml
windows10-2004-x64
3Log_Base_sub.xml
windows7-x64
1Log_Base_sub.xml
windows10-2004-x64
3MixedFraction_sub.xml
windows7-x64
1MixedFraction_sub.xml
windows10-2004-x64
3NthRoot_sub.xml
windows7-x64
1NthRoot_sub.xml
windows10-2004-x64
3PI_sub.xml
windows7-x64
1PI_sub.xml
windows10-2004-x64
3Sub3_sub.xml
windows7-x64
1Sub3_sub.xml
windows10-2004-x64
3Super3_sub.xml
windows7-x64
1Super3_sub.xml
windows10-2004-x64
3arrowdown.xml
windows7-x64
1arrowdown.xml
windows10-2004-x64
3cup_sub.xml
windows7-x64
1Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
15-08-2023 22:00
Static task
static1
Behavioral task
behavioral1
Sample
d1daa8dcbbe3cdbe4ff97598d8b93c7c2562229c5c081f35068d6a66a8591035.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
d1daa8dcbbe3cdbe4ff97598d8b93c7c2562229c5c081f35068d6a66a8591035.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral3
Sample
d1daa8dcbbe3cdbe4ff97598d8b93c7c2562229c5c081f35068d6a66a8591035.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral4
Sample
EularsB_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral5
Sample
EularsB_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral6
Sample
Factorial_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral7
Sample
Factorial_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral8
Sample
Fraction_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral9
Sample
Fraction_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral10
Sample
GreaterThanOr_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral11
Sample
GreaterThanOr_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral12
Sample
Imaginary_num_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral13
Sample
Imaginary_num_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral14
Sample
LessThanOr_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral15
Sample
LessThanOr_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral16
Sample
Ln_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral17
Sample
Ln_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral18
Sample
Log_Base_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral19
Sample
Log_Base_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral20
Sample
MixedFraction_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral21
Sample
MixedFraction_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral22
Sample
NthRoot_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral23
Sample
NthRoot_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral24
Sample
PI_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral25
Sample
PI_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral26
Sample
Sub3_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral27
Sample
Sub3_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral28
Sample
Super3_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral29
Sample
Super3_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral30
Sample
arrowdown.xml
Resource
win7-20230712-en
Behavioral task
behavioral31
Sample
arrowdown.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral32
Sample
cup_sub.xml
Resource
win7-20230712-en
General
-
Target
Ln_sub.xml
-
Size
906B
-
MD5
50948f090a36b025ceeadb20cfedf70c
-
SHA1
5d1222847e797a649d2a1115f09522004388cb5c
-
SHA256
fe98593b9944c672753c1e1404bf2d8edba24474c189d4c229bbb94219259565
-
SHA512
a6deec560f44944b6e2ce14254edb23f127fd413873e68f7ab3c238653ae7395ec44f96dab61ba75a2e8eb841693b10c86b7ba9829d97890140958edef5f8272
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 732 2664 WerFault.exe MSOXMLED.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Ln_sub.xml"1⤵PID:2664
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2664 -s 4362⤵
- Program crash
PID:732
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 2664 -ip 26641⤵PID:2544