Overview
overview
3Static
static
1NO-EXTENSI...10.zip
windows7-x64
1NO-EXTENSI...10.zip
windows10-2004-x64
1Payload/Ap...Apollo
macos-10.15-amd64
1Payload/Ap...ts.xml
windows7-x64
1Payload/Ap...ts.xml
windows10-2004-x64
1Payload/Ap...2x.png
windows7-x64
3Payload/Ap...2x.png
windows10-2004-x64
3Payload/Ap...ad.png
windows7-x64
3Payload/Ap...ad.png
windows10-2004-x64
3Payload/Ap...ts.car
windows7-x64
3Payload/Ap...ts.car
windows10-2004-x64
3Payload/Ap...et.xml
windows7-x64
1Payload/Ap...et.xml
windows10-2004-x64
1Payload/Ap...ll.nib
windows7-x64
3Payload/Ap...ll.nib
windows10-2004-x64
3Payload/Ap...t3.nib
windows7-x64
3Payload/Ap...t3.nib
windows10-2004-x64
3Payload/Ap....plist
windows7-x64
3Payload/Ap....plist
windows10-2004-x64
3Payload/Ap...VM.nib
windows7-x64
3Payload/Ap...VM.nib
windows10-2004-x64
3Payload/Ap...ll.nib
windows7-x64
3Payload/Ap...ll.nib
windows10-2004-x64
3Payload/Ap....plist
windows7-x64
3Payload/Ap....plist
windows10-2004-x64
3Payload/Ap...ll.nib
windows7-x64
3Payload/Ap...ll.nib
windows10-2004-x64
3Payload/Ap....plist
windows7-x64
3Payload/Ap....plist
windows10-2004-x64
3Payload/Ap...orking
macos-10.15-amd64
1Payload/Ap....plist
windows7-x64
3Payload/Ap....plist
windows10-2004-x64
3Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
07/03/2024, 07:49
Static task
static1
Behavioral task
behavioral1
Sample
NO-EXTENSIONS_Apollo-1.15.11_improvedcustomapi-1.0.10.zip
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
NO-EXTENSIONS_Apollo-1.15.11_improvedcustomapi-1.0.10.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Payload/Apollo.app/Apollo
Resource
macos-20240214-en
Behavioral task
behavioral4
Sample
Payload/Apollo.app/ApolloIntents.xml
Resource
win7-20240215-en
Behavioral task
behavioral5
Sample
Payload/Apollo.app/ApolloIntents.xml
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Payload/Apollo.app/[email protected]
Resource
win10v2004-20240226-en
Behavioral task
behavioral8
Sample
Payload/Apollo.app/AppIcon76x76@2x~ipad.png
Resource
win7-20240221-en
Behavioral task
behavioral9
Sample
Payload/Apollo.app/AppIcon76x76@2x~ipad.png
Resource
win10v2004-20240226-en
Behavioral task
behavioral10
Sample
Payload/Apollo.app/Assets.car
Resource
win7-20240221-en
Behavioral task
behavioral11
Sample
Payload/Apollo.app/Assets.car
Resource
win10v2004-20240226-en
Behavioral task
behavioral12
Sample
Payload/Apollo.app/AthenaWidget.xml
Resource
win7-20240220-en
Behavioral task
behavioral13
Sample
Payload/Apollo.app/AthenaWidget.xml
Resource
win10v2004-20240226-en
Behavioral task
behavioral14
Sample
Payload/Apollo.app/BanDurationTableViewCell.nib
Resource
win7-20240221-en
Behavioral task
behavioral15
Sample
Payload/Apollo.app/BanDurationTableViewCell.nib
Resource
win10v2004-20240226-en
Behavioral task
behavioral16
Sample
Payload/Apollo.app/Base.lproj/LaunchScreen.storyboardc/01J-lp-oVM-view-Ze5-6b-2t3.nib
Resource
win7-20240221-en
Behavioral task
behavioral17
Sample
Payload/Apollo.app/Base.lproj/LaunchScreen.storyboardc/01J-lp-oVM-view-Ze5-6b-2t3.nib
Resource
win10v2004-20240226-en
Behavioral task
behavioral18
Sample
Payload/Apollo.app/Base.lproj/LaunchScreen.storyboardc/Info.plist
Resource
win7-20240221-en
Behavioral task
behavioral19
Sample
Payload/Apollo.app/Base.lproj/LaunchScreen.storyboardc/Info.plist
Resource
win10v2004-20240226-en
Behavioral task
behavioral20
Sample
Payload/Apollo.app/Base.lproj/LaunchScreen.storyboardc/UIViewController-01J-lp-oVM.nib
Resource
win7-20240221-en
Behavioral task
behavioral21
Sample
Payload/Apollo.app/Base.lproj/LaunchScreen.storyboardc/UIViewController-01J-lp-oVM.nib
Resource
win10v2004-20240226-en
Behavioral task
behavioral22
Sample
Payload/Apollo.app/BrightnessThresholdTableViewCell.nib
Resource
win7-20240220-en
Behavioral task
behavioral23
Sample
Payload/Apollo.app/BrightnessThresholdTableViewCell.nib
Resource
win10v2004-20240226-en
Behavioral task
behavioral24
Sample
Payload/Apollo.app/CommentColorThemes.plist
Resource
win7-20240221-en
Behavioral task
behavioral25
Sample
Payload/Apollo.app/CommentColorThemes.plist
Resource
win10v2004-20240226-en
Behavioral task
behavioral26
Sample
Payload/Apollo.app/DatePickerTableViewCell.nib
Resource
win7-20240221-en
Behavioral task
behavioral27
Sample
Payload/Apollo.app/DatePickerTableViewCell.nib
Resource
win10v2004-20240226-en
Behavioral task
behavioral28
Sample
Payload/Apollo.app/Defaults.plist
Resource
win7-20240221-en
Behavioral task
behavioral29
Sample
Payload/Apollo.app/Defaults.plist
Resource
win10v2004-20240226-en
Behavioral task
behavioral30
Sample
Payload/Apollo.app/Frameworks/AFNetworking.framework/AFNetworking
Resource
macos-20240214-en
Behavioral task
behavioral31
Sample
Payload/Apollo.app/Frameworks/AFNetworking.framework/Info.plist
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Payload/Apollo.app/Frameworks/AFNetworking.framework/Info.plist
Resource
win10v2004-20240226-en
General
-
Target
Payload/Apollo.app/AthenaWidget.xml
-
Size
91KB
-
MD5
f4ec872b6811f107369c25d335262aad
-
SHA1
e96ec8206694e567498550eca1ed1b6eae7e1df1
-
SHA256
7241a1c1304420aa5f8a63d64b179002262a64f4d516043378c940be66095c3a
-
SHA512
289acc52a387367978f98f00d933d17bc30e8b0ae4ee81598e25f91aad08b87994fb43b02c2bf163ac7f34e026bdae2d7449e58694ba02f02f8af1112a10b162
-
SSDEEP
384:ty0mgCwvqApfgKZu9dnmgMpuYvokkY5V7tMi1E8e+UCue02Sv1vaaSrbyzvywDMS:AHuQ9BjOgE+fNxWa
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Payload\Apollo.app\AthenaWidget.xml"1⤵PID:2572
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3768 --field-trial-handle=2284,i,15722001240173834669,15048020084704567542,262144 --variations-seed-version /prefetch:81⤵PID:4644