Overview
overview
10Static
static
7d1daa8dcbb...35.apk
android-9-x86
10d1daa8dcbb...35.apk
android-10-x64
10d1daa8dcbb...35.apk
android-11-x64
10EularsB_sub.xml
windows7-x64
1EularsB_sub.xml
windows10-2004-x64
3Factorial_sub.xml
windows7-x64
1Factorial_sub.xml
windows10-2004-x64
3Fraction_sub.xml
windows7-x64
1Fraction_sub.xml
windows10-2004-x64
3GreaterThanOr_sub.xml
windows7-x64
1GreaterThanOr_sub.xml
windows10-2004-x64
3Imaginary_num_sub.xml
windows7-x64
1Imaginary_num_sub.xml
windows10-2004-x64
3LessThanOr_sub.xml
windows7-x64
1LessThanOr_sub.xml
windows10-2004-x64
3Ln_sub.xml
windows7-x64
1Ln_sub.xml
windows10-2004-x64
3Log_Base_sub.xml
windows7-x64
1Log_Base_sub.xml
windows10-2004-x64
3MixedFraction_sub.xml
windows7-x64
1MixedFraction_sub.xml
windows10-2004-x64
3NthRoot_sub.xml
windows7-x64
1NthRoot_sub.xml
windows10-2004-x64
3PI_sub.xml
windows7-x64
1PI_sub.xml
windows10-2004-x64
3Sub3_sub.xml
windows7-x64
1Sub3_sub.xml
windows10-2004-x64
3Super3_sub.xml
windows7-x64
1Super3_sub.xml
windows10-2004-x64
3arrowdown.xml
windows7-x64
1arrowdown.xml
windows10-2004-x64
3cup_sub.xml
windows7-x64
1Analysis
-
max time kernel
90s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
15-08-2023 22:00
Static task
static1
Behavioral task
behavioral1
Sample
d1daa8dcbbe3cdbe4ff97598d8b93c7c2562229c5c081f35068d6a66a8591035.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
d1daa8dcbbe3cdbe4ff97598d8b93c7c2562229c5c081f35068d6a66a8591035.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral3
Sample
d1daa8dcbbe3cdbe4ff97598d8b93c7c2562229c5c081f35068d6a66a8591035.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral4
Sample
EularsB_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral5
Sample
EularsB_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral6
Sample
Factorial_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral7
Sample
Factorial_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral8
Sample
Fraction_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral9
Sample
Fraction_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral10
Sample
GreaterThanOr_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral11
Sample
GreaterThanOr_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral12
Sample
Imaginary_num_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral13
Sample
Imaginary_num_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral14
Sample
LessThanOr_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral15
Sample
LessThanOr_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral16
Sample
Ln_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral17
Sample
Ln_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral18
Sample
Log_Base_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral19
Sample
Log_Base_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral20
Sample
MixedFraction_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral21
Sample
MixedFraction_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral22
Sample
NthRoot_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral23
Sample
NthRoot_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral24
Sample
PI_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral25
Sample
PI_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral26
Sample
Sub3_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral27
Sample
Sub3_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral28
Sample
Super3_sub.xml
Resource
win7-20230712-en
Behavioral task
behavioral29
Sample
Super3_sub.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral30
Sample
arrowdown.xml
Resource
win7-20230712-en
Behavioral task
behavioral31
Sample
arrowdown.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral32
Sample
cup_sub.xml
Resource
win7-20230712-en
General
-
Target
Factorial_sub.xml
-
Size
701B
-
MD5
42b28d156719df282309756a34c0a5bd
-
SHA1
c1ba8f4a5be9a80da380901b4a377bfcbcc7b9fb
-
SHA256
4ff932dab9bfc11b6547349bf0687eba5c093852ec21e41c4e7fc8815ee8f348
-
SHA512
f0b11389dd20aef4e9d291b60ee5501eefbe1f62da4b66ae49104733e70e0bb3ed97fb676982e908f3bd9d1b450e0d222ce7e856270ef1171aaaab399c1c8962
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target Process procid_target 3168 2120 WerFault.exe 80
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Factorial_sub.xml"1⤵PID:2120
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2120 -s 4482⤵
- Program crash
PID:3168
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 452 -p 2120 -ip 21201⤵PID:4544