Overview
overview
10Static
static
7d1daa8dcbb...35.apk
android-9-x86
10d1daa8dcbb...35.apk
android-10-x64
10d1daa8dcbb...35.apk
android-11-x64
10EularsB_sub.xml
windows7-x64
1EularsB_sub.xml
windows10-2004-x64
3Factorial_sub.xml
windows7-x64
1Factorial_sub.xml
windows10-2004-x64
3Fraction_sub.xml
windows7-x64
1Fraction_sub.xml
windows10-2004-x64
3GreaterThanOr_sub.xml
windows7-x64
1GreaterThanOr_sub.xml
windows10-2004-x64
3Imaginary_num_sub.xml
windows7-x64
1Imaginary_num_sub.xml
windows10-2004-x64
3LessThanOr_sub.xml
windows7-x64
1LessThanOr_sub.xml
windows10-2004-x64
3Ln_sub.xml
windows7-x64
1Ln_sub.xml
windows10-2004-x64
3Log_Base_sub.xml
windows7-x64
1Log_Base_sub.xml
windows10-2004-x64
3MixedFraction_sub.xml
windows7-x64
1MixedFraction_sub.xml
windows10-2004-x64
3NthRoot_sub.xml
windows7-x64
1NthRoot_sub.xml
windows10-2004-x64
3PI_sub.xml
windows7-x64
1PI_sub.xml
windows10-2004-x64
3Sub3_sub.xml
windows7-x64
1Sub3_sub.xml
windows10-2004-x64
3Super3_sub.xml
windows7-x64
1Super3_sub.xml
windows10-2004-x64
3arrowdown.xml
windows7-x64
1arrowdown.xml
windows10-2004-x64
3cup_sub.xml
windows7-x64
1Analysis
-
max time kernel
127s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
15-08-2023 22:00
Static task
static1
Behavioral task
behavioral1
Sample
d1daa8dcbbe3cdbe4ff97598d8b93c7c2562229c5c081f35068d6a66a8591035.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
d1daa8dcbbe3cdbe4ff97598d8b93c7c2562229c5c081f35068d6a66a8591035.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral3
Sample
d1daa8dcbbe3cdbe4ff97598d8b93c7c2562229c5c081f35068d6a66a8591035.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral4
Sample
EularsB_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral5
Sample
EularsB_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral6
Sample
Factorial_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral7
Sample
Factorial_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral8
Sample
Fraction_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral9
Sample
Fraction_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral10
Sample
GreaterThanOr_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral11
Sample
GreaterThanOr_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral12
Sample
Imaginary_num_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral13
Sample
Imaginary_num_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral14
Sample
LessThanOr_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral15
Sample
LessThanOr_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral16
Sample
Ln_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral17
Sample
Ln_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral18
Sample
Log_Base_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral19
Sample
Log_Base_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral20
Sample
MixedFraction_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral21
Sample
MixedFraction_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral22
Sample
NthRoot_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral23
Sample
NthRoot_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral24
Sample
PI_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral25
Sample
PI_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral26
Sample
Sub3_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral27
Sample
Sub3_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral28
Sample
Super3_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral29
Sample
Super3_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral30
Sample
arrowdown.xml
Resource
win7-20230712-en
Behavioral task
behavioral31
Sample
arrowdown.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral32
Sample
cup_sub.xml
Resource
win7-20230712-en
General
-
Target
PI_sub.xml
-
Size
923B
-
MD5
6ce587a0e5450f657616880bf2a8c20a
-
SHA1
fada1d7082f216acb7a94ed9bf76442ad4e3b557
-
SHA256
60128e9d8298ba321d66c0a391d9f1d9f4e07f10e902b925aaee7ad652956a00
-
SHA512
3aba47621fab9bb79822ec430aaa5d2c338bccdbbc2caf1ccd11df66947e889fd24af788099c7b8c4674803102348f9c32f8e13dca28d6dfd5ea8e6c754ebe28
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4380 5100 WerFault.exe MSOXMLED.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\PI_sub.xml"1⤵PID:5100
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 5100 -s 4482⤵
- Program crash
PID:4380
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 5100 -ip 51001⤵PID:4636