Overview
overview
10Static
static
3Portable_x32_x64.zip
windows7-x64
1Portable_x32_x64.zip
windows10-2004-x64
1Portable_x...e.pimx
windows7-x64
3Portable_x...e.pimx
windows10-2004-x64
3Portable_x...in.ini
windows7-x64
1Portable_x...in.ini
windows10-2004-x64
1Portable_x...in.xml
windows7-x64
3Portable_x...in.xml
windows10-2004-x64
1Portable_x...ce.dll
windows7-x64
1Portable_x...ce.dll
windows10-2004-x64
1Portable_x...ls.xml
windows7-x64
3Portable_x...ls.xml
windows10-2004-x64
1Portable_x...up.exe
windows7-x64
3Portable_x...up.exe
windows10-2004-x64
10Portable_x...40.dll
windows7-x64
1Portable_x...40.dll
windows10-2004-x64
1Portable_x...ju.wsf
windows7-x64
1Portable_x...ju.wsf
windows10-2004-x64
1Portable_x...ed.xml
windows7-x64
3Portable_x...ed.xml
windows10-2004-x64
1Portable_x...to.xml
windows7-x64
3Portable_x...to.xml
windows10-2004-x64
1Portable_x...ng.xml
windows7-x64
3Portable_x...ng.xml
windows10-2004-x64
1Portable_x...ae.xml
windows7-x64
3Portable_x...ae.xml
windows10-2004-x64
1Portable_x...re.xml
windows7-x64
3Portable_x...re.xml
windows10-2004-x64
1Portable_x...rs.xml
windows7-x64
3Portable_x...rs.xml
windows10-2004-x64
1Portable_x...go.xml
windows7-x64
3Portable_x...go.xml
windows10-2004-x64
1Analysis
-
max time kernel
423s -
max time network
425s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
22-08-2024 12:15
Static task
static1
Behavioral task
behavioral1
Sample
Portable_x32_x64.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Portable_x32_x64.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Portable_x32_x64/Data/Language.pimx
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Portable_x32_x64/Data/Language.pimx
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Portable_x32_x64/Data/Main.ini
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Portable_x32_x64/Data/Main.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Portable_x32_x64/Data/Packaged/Main.xml
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Portable_x32_x64/Data/Packaged/Main.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Portable_x32_x64/Data/Packaged/Resource.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Portable_x32_x64/Data/Packaged/Resource.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Portable_x32_x64/Data/Packaged/Utils.xml
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
Portable_x32_x64/Data/Packaged/Utils.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Portable_x32_x64/Setup.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Portable_x32_x64/Setup.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Portable_x32_x64/msvcp140.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Portable_x32_x64/msvcp140.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Portable_x32_x64/res/cravats/broachOneill/badju.wsf
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Portable_x32_x64/res/cravats/broachOneill/badju.wsf
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Portable_x32_x64/res/cravats/broachOneill/bestinkSonarsBuzzed.xml
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
Portable_x32_x64/res/cravats/broachOneill/bestinkSonarsBuzzed.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Portable_x32_x64/res/cravats/broachOneill/busto.xml
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
Portable_x32_x64/res/cravats/broachOneill/busto.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Portable_x32_x64/res/cravats/broachOneill/gabblerTinderyBeaming.xml
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Portable_x32_x64/res/cravats/broachOneill/gabblerTinderyBeaming.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Portable_x32_x64/res/cravats/broachOneill/hebrewsNae.xml
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Portable_x32_x64/res/cravats/broachOneill/hebrewsNae.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/baluchKenlore.xml
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/baluchKenlore.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/ecuadorCapers.xml
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/ecuadorCapers.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/fungo.xml
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/fungo.xml
Resource
win10v2004-20240802-en
General
-
Target
Portable_x32_x64/res/cravats/broachOneill/busto.xml
-
Size
13KB
-
MD5
a6440d04aa8b84a3f7b373142f46aec8
-
SHA1
b794d5a0d5a398713eaa444d10ceabef128a8502
-
SHA256
774579308b68d19f8ea3252e3cb51067a816bbfcc6b7f7668993110db438be90
-
SHA512
c7a57376a5e7bae17d59b9d7ab2e2362100d3930af41704ccdfe6dded4649a66754da34df9a7659aee9e3bd65872e919deb8956755a5e5fa8acbc781ef406e85
-
SSDEEP
384:oR2IjUd8szjPms8WmbWGcBNVEAP8N+U+72hJMWNqOImf:opd6jPm+uajP8Numf
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Portable_x32_x64\res\cravats\broachOneill\busto.xml"1⤵PID:228