Overview
overview
10Static
static
3Portable_x32_x64.zip
windows7-x64
1Portable_x32_x64.zip
windows10-2004-x64
1Portable_x...e.pimx
windows7-x64
3Portable_x...e.pimx
windows10-2004-x64
3Portable_x...in.ini
windows7-x64
1Portable_x...in.ini
windows10-2004-x64
1Portable_x...in.xml
windows7-x64
3Portable_x...in.xml
windows10-2004-x64
1Portable_x...ce.dll
windows7-x64
1Portable_x...ce.dll
windows10-2004-x64
1Portable_x...ls.xml
windows7-x64
3Portable_x...ls.xml
windows10-2004-x64
1Portable_x...up.exe
windows7-x64
3Portable_x...up.exe
windows10-2004-x64
10Portable_x...40.dll
windows7-x64
1Portable_x...40.dll
windows10-2004-x64
1Portable_x...ju.wsf
windows7-x64
1Portable_x...ju.wsf
windows10-2004-x64
1Portable_x...ed.xml
windows7-x64
3Portable_x...ed.xml
windows10-2004-x64
1Portable_x...to.xml
windows7-x64
3Portable_x...to.xml
windows10-2004-x64
1Portable_x...ng.xml
windows7-x64
3Portable_x...ng.xml
windows10-2004-x64
1Portable_x...ae.xml
windows7-x64
3Portable_x...ae.xml
windows10-2004-x64
1Portable_x...re.xml
windows7-x64
3Portable_x...re.xml
windows10-2004-x64
1Portable_x...rs.xml
windows7-x64
3Portable_x...rs.xml
windows10-2004-x64
1Portable_x...go.xml
windows7-x64
3Portable_x...go.xml
windows10-2004-x64
1Analysis
-
max time kernel
420s -
max time network
439s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
22-08-2024 12:15
Static task
static1
Behavioral task
behavioral1
Sample
Portable_x32_x64.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Portable_x32_x64.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Portable_x32_x64/Data/Language.pimx
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Portable_x32_x64/Data/Language.pimx
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Portable_x32_x64/Data/Main.ini
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Portable_x32_x64/Data/Main.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Portable_x32_x64/Data/Packaged/Main.xml
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Portable_x32_x64/Data/Packaged/Main.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Portable_x32_x64/Data/Packaged/Resource.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Portable_x32_x64/Data/Packaged/Resource.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Portable_x32_x64/Data/Packaged/Utils.xml
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
Portable_x32_x64/Data/Packaged/Utils.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Portable_x32_x64/Setup.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Portable_x32_x64/Setup.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Portable_x32_x64/msvcp140.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Portable_x32_x64/msvcp140.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Portable_x32_x64/res/cravats/broachOneill/badju.wsf
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Portable_x32_x64/res/cravats/broachOneill/badju.wsf
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Portable_x32_x64/res/cravats/broachOneill/bestinkSonarsBuzzed.xml
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
Portable_x32_x64/res/cravats/broachOneill/bestinkSonarsBuzzed.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Portable_x32_x64/res/cravats/broachOneill/busto.xml
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
Portable_x32_x64/res/cravats/broachOneill/busto.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Portable_x32_x64/res/cravats/broachOneill/gabblerTinderyBeaming.xml
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Portable_x32_x64/res/cravats/broachOneill/gabblerTinderyBeaming.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Portable_x32_x64/res/cravats/broachOneill/hebrewsNae.xml
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Portable_x32_x64/res/cravats/broachOneill/hebrewsNae.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/baluchKenlore.xml
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/baluchKenlore.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/ecuadorCapers.xml
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/ecuadorCapers.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/fungo.xml
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/fungo.xml
Resource
win10v2004-20240802-en
General
-
Target
Portable_x32_x64/Data/Packaged/Utils.xml
-
Size
1KB
-
MD5
73e051427246dd4ca45935b1a4bd7e2d
-
SHA1
7216f05041252f1c3a9d84aacdf84ef62f1a1045
-
SHA256
b7b8b412ab1e4f32da8a7cd42aeaa6e7d8d340cf14977d3e87f7d8f5eb689b0f
-
SHA512
3fc10dea91962244389214d189c141466f5630e99b01af5761738ce884df14050cd08a43802dc45bbe9117290c34143b85a75694b6301954b51972180dca1e36
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Portable_x32_x64\Data\Packaged\Utils.xml"1⤵PID:4916