Overview
overview
10Static
static
7d1daa8dcbb...35.apk
android-9-x86
10d1daa8dcbb...35.apk
android-10-x64
10d1daa8dcbb...35.apk
android-11-x64
10EularsB_sub.xml
windows7-x64
1EularsB_sub.xml
windows10-2004-x64
3Factorial_sub.xml
windows7-x64
1Factorial_sub.xml
windows10-2004-x64
3Fraction_sub.xml
windows7-x64
1Fraction_sub.xml
windows10-2004-x64
3GreaterThanOr_sub.xml
windows7-x64
1GreaterThanOr_sub.xml
windows10-2004-x64
3Imaginary_num_sub.xml
windows7-x64
1Imaginary_num_sub.xml
windows10-2004-x64
3LessThanOr_sub.xml
windows7-x64
1LessThanOr_sub.xml
windows10-2004-x64
3Ln_sub.xml
windows7-x64
1Ln_sub.xml
windows10-2004-x64
3Log_Base_sub.xml
windows7-x64
1Log_Base_sub.xml
windows10-2004-x64
3MixedFraction_sub.xml
windows7-x64
1MixedFraction_sub.xml
windows10-2004-x64
3NthRoot_sub.xml
windows7-x64
1NthRoot_sub.xml
windows10-2004-x64
3PI_sub.xml
windows7-x64
1PI_sub.xml
windows10-2004-x64
3Sub3_sub.xml
windows7-x64
1Sub3_sub.xml
windows10-2004-x64
3Super3_sub.xml
windows7-x64
1Super3_sub.xml
windows10-2004-x64
3arrowdown.xml
windows7-x64
1arrowdown.xml
windows10-2004-x64
3cup_sub.xml
windows7-x64
1Analysis
-
max time kernel
138s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
15-08-2023 22:00
Static task
static1
Behavioral task
behavioral1
Sample
d1daa8dcbbe3cdbe4ff97598d8b93c7c2562229c5c081f35068d6a66a8591035.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
d1daa8dcbbe3cdbe4ff97598d8b93c7c2562229c5c081f35068d6a66a8591035.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral3
Sample
d1daa8dcbbe3cdbe4ff97598d8b93c7c2562229c5c081f35068d6a66a8591035.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral4
Sample
EularsB_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral5
Sample
EularsB_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral6
Sample
Factorial_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral7
Sample
Factorial_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral8
Sample
Fraction_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral9
Sample
Fraction_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral10
Sample
GreaterThanOr_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral11
Sample
GreaterThanOr_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral12
Sample
Imaginary_num_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral13
Sample
Imaginary_num_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral14
Sample
LessThanOr_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral15
Sample
LessThanOr_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral16
Sample
Ln_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral17
Sample
Ln_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral18
Sample
Log_Base_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral19
Sample
Log_Base_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral20
Sample
MixedFraction_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral21
Sample
MixedFraction_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral22
Sample
NthRoot_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral23
Sample
NthRoot_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral24
Sample
PI_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral25
Sample
PI_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral26
Sample
Sub3_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral27
Sample
Sub3_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral28
Sample
Super3_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral29
Sample
Super3_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral30
Sample
arrowdown.xml
Resource
win7-20230712-en
Behavioral task
behavioral31
Sample
arrowdown.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral32
Sample
cup_sub.xml
Resource
win7-20230712-en
General
-
Target
NthRoot_sub.xml
-
Size
657B
-
MD5
a0df17f1518f2fb86e7344246a2e4e69
-
SHA1
47191ae14807686f0bc12469d44f8c2dc9a68457
-
SHA256
a2fa04cf6fb2057bb09c6269bca6392e2e38d140fe4536c381d7d539b1521b3a
-
SHA512
867e10feda5358e0adb6280a5dd552e441b38755e5991f84601feac114d7ad1a53273d066af313595614f49aefa925ad6f0d2123664f36b3a965488c853f21ed
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target Process procid_target 3348 532 WerFault.exe 80
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\NthRoot_sub.xml"1⤵PID:532
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 532 -s 4442⤵
- Program crash
PID:3348
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 532 -ip 5321⤵PID:3024