Overview
overview
3Static
static
1adlcp_rootv1p2.xml
windows7-x64
1adlcp_rootv1p2.xml
windows10-2004-x64
3analytics-frame.html
windows7-x64
1analytics-frame.html
windows10-2004-x64
1html5/data...hlI.js
windows7-x64
1html5/data...hlI.js
windows10-2004-x64
1html5/data...nfq.js
windows7-x64
1html5/data...nfq.js
windows10-2004-x64
1html5/data/js/data.js
windows7-x64
1html5/data/js/data.js
windows10-2004-x64
1html5/data...ame.js
windows7-x64
1html5/data...ame.js
windows10-2004-x64
1html5/data...ths.js
windows7-x64
1html5/data...ths.js
windows10-2004-x64
1html5/lib/...min.js
windows7-x64
1html5/lib/...min.js
windows10-2004-x64
1html5/lib/...min.js
windows7-x64
1html5/lib/...min.js
windows10-2004-x64
1html5/lib/...min.js
windows7-x64
1html5/lib/...min.js
windows10-2004-x64
1html5/lib/...min.js
windows7-x64
1html5/lib/...min.js
windows10-2004-x64
1ims_xml.xml
windows7-x64
1ims_xml.xml
windows10-2004-x64
3imscp_rootv1p1p2.xml
windows7-x64
1imscp_rootv1p1p2.xml
windows10-2004-x64
3imsmd_rootv1p2p1.xml
windows7-x64
1imsmd_rootv1p2p1.xml
windows10-2004-x64
3index_lms.html
windows7-x64
1index_lms.html
windows10-2004-x64
1lms/AICCComm.html
windows7-x64
1lms/AICCComm.html
windows10-2004-x64
1Analysis
-
max time kernel
90s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
25/08/2023, 04:53
Static task
static1
Behavioral task
behavioral1
Sample
adlcp_rootv1p2.xml
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
adlcp_rootv1p2.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
analytics-frame.html
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
analytics-frame.html
Resource
win10v2004-20230824-en
Behavioral task
behavioral5
Sample
html5/data/js/5pxdjxC4hlI.js
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
html5/data/js/5pxdjxC4hlI.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
html5/data/js/6PAh9zJPnfq.js
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
html5/data/js/6PAh9zJPnfq.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
html5/data/js/data.js
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
html5/data/js/data.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
html5/data/js/frame.js
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
html5/data/js/frame.js
Resource
win10v2004-20230824-en
Behavioral task
behavioral13
Sample
html5/data/js/paths.js
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
html5/data/js/paths.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
html5/lib/scripts/bootstrapper.min.js
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
html5/lib/scripts/bootstrapper.min.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
html5/lib/scripts/frame.desktop.min.js
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
html5/lib/scripts/frame.desktop.min.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
html5/lib/scripts/frame.mobile.min.js
Resource
win7-20230712-en
Behavioral task
behavioral20
Sample
html5/lib/scripts/frame.mobile.min.js
Resource
win10v2004-20230824-en
Behavioral task
behavioral21
Sample
html5/lib/scripts/slides.min.js
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
html5/lib/scripts/slides.min.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
ims_xml.xml
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
ims_xml.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
imscp_rootv1p1p2.xml
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
imscp_rootv1p1p2.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
imsmd_rootv1p2p1.xml
Resource
win7-20230712-en
Behavioral task
behavioral28
Sample
imsmd_rootv1p2p1.xml
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
index_lms.html
Resource
win7-20230824-en
Behavioral task
behavioral30
Sample
index_lms.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
lms/AICCComm.html
Resource
win7-20230712-en
Behavioral task
behavioral32
Sample
lms/AICCComm.html
Resource
win10v2004-20230703-en
General
-
Target
adlcp_rootv1p2.xml
-
Size
4KB
-
MD5
e2d3872c7509f6e3f1fc7ab7c07eee52
-
SHA1
cd9e790f4d508f2fe060afc7d001a337b0b14efb
-
SHA256
166397a1f52585caac857228cf2b10085a5d07c0612a3d55cb3ed108ce8b028a
-
SHA512
c4d50965ed38104ac8a391ff84459991d1c7536d89d8e9afb1eea9fe15528dd369ce973c7d3db48fc89a9f0b3af44bad4926a20a60245fcf5fb881819b1875ce
-
SSDEEP
48:KE36pp/8pjcDEdXYr6WO3fWAwRxYTXPD3ZM06uOvOfkOefOOCTu0mY:r3U/i1iQXwzITmiwu/b
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4740 576 WerFault.exe 81
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\adlcp_rootv1p2.xml"1⤵PID:576
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 576 -s 4442⤵
- Program crash
PID:4740
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 404 -p 576 -ip 5761⤵PID:3812