975bf6a4021c964ace26e9a0518856955e111b1d2b2cb7c4e4bb98dd12df64cb | Triage

Submit
Reports

Overview

overview

Static

static

7

975bf6a402...cb.apk

android-9-x86

975bf6a402...cb.apk

android-10-x64

975bf6a402...cb.apk

android-11-x64

closebutton.html

windows7-x64

1

closebutton.html

windows10-2004-x64

1

core_wrapper.js

windows7-x64

1

core_wrapper.js

windows10-2004-x64

1

help.htm

windows7-x64

1

help.htm

windows10-2004-x64

1

help_cs.htm

windows7-x64

1

help_cs.htm

windows10-2004-x64

1

help_uk.htm

windows7-x64

1

help_uk.htm

windows10-2004-x64

1

license.htm

windows7-x64

1

license.htm

windows10-2004-x64

1

mraid.js

windows7-x64

1

mraid.js

windows10-2004-x64

1

omsdk-v1.js

windows7-x64

1

omsdk-v1.js

windows10-2004-x64

1

playstore.htm

windows7-x64

1

playstore.htm

windows10-2004-x64

1

privacy_cn.htm

windows7-x64

1

privacy_cn.htm

windows10-2004-x64

1

totalcmd_d...ng.htm

windows7-x64

1

totalcmd_d...ng.htm

windows10-2004-x64

1

totalcmd_p...cy.htm

windows7-x64

1

totalcmd_p...cy.htm

windows10-2004-x64

1

wifi_rc.html

windows7-x64

1

wifi_rc.html

windows10-2004-x64

1

Analysis

max time kernel
86s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
19-10-2023 22:00

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

975bf6a4021c964ace26e9a0518856955e111b1d2b2cb7c4e4bb98dd12df64cb.apk

Resource

android-x86-arm-20230831-en

ermac hook banker evasion infostealer ransomware rat stealth trojan

android-9-x86

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

975bf6a4021c964ace26e9a0518856955e111b1d2b2cb7c4e4bb98dd12df64cb.apk

Resource

android-x64-20230831-en

ermac hook banker evasion infostealer ransomware rat trojan

android-10-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

975bf6a4021c964ace26e9a0518856955e111b1d2b2cb7c4e4bb98dd12df64cb.apk

Resource

android-x64-arm64-20230831-en

ermac hook banker evasion infostealer ransomware rat trojan

android-11-x64

9 signatures

150 seconds

Behavioral task

behavioral4

Sample

closebutton.html

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

closebutton.html

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

core_wrapper.js

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

core_wrapper.js

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

help.htm

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

help.htm

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

help_cs.htm

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

help_cs.htm

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

help_uk.htm

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

help_uk.htm

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

license.htm

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

license.htm

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

mraid.js

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

mraid.js

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

omsdk-v1.js

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

omsdk-v1.js

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

playstore.htm

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral21

Sample

playstore.htm

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

privacy_cn.htm

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

privacy_cn.htm

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral24

Sample

totalcmd_datenschutzerklaerung.htm

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral25

Sample

totalcmd_datenschutzerklaerung.htm

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

totalcmd_privacy_policy.htm

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral27

Sample

totalcmd_privacy_policy.htm

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral28

Sample

wifi_rc.html

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral29

Sample

wifi_rc.html

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Report Analysis Logs

General

Target

core_wrapper.js
Size

5KB
MD5

2558e92bdb03c3e4685d4320a7cbe715
SHA1

9feff7ec75024ba6d9753ea233ffbe0b7bc04bf7
SHA256

99a17d18531953e748103eb021738a42eb9fe675532a4d42441d3bc34e048bc8
SHA512

83409561241255be24558f6b238f1687ea7f703d6950a8ad54ff4c50aa9c62af490b74e9b60379ff074b92942bf4752a653a19c4da2b554ac59ecfa0f5fad9f3
SSDEEP

96:MIn5NKjaILnYJX+myXjfaw17BLyHjLAHIIJUU/AUYYg8InG+d:N5NKjDrYJX+my7aw17UHjLAHIIJUUAW8

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\core_wrapper.js
1⤵
PID:1032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy