Overview
overview
10Static
static
3Portable_x32_x64.zip
windows7-x64
1Portable_x32_x64.zip
windows10-2004-x64
1Portable_x...e.pimx
windows7-x64
3Portable_x...e.pimx
windows10-2004-x64
3Portable_x...in.ini
windows7-x64
1Portable_x...in.ini
windows10-2004-x64
1Portable_x...in.xml
windows7-x64
3Portable_x...in.xml
windows10-2004-x64
1Portable_x...ce.dll
windows7-x64
1Portable_x...ce.dll
windows10-2004-x64
1Portable_x...ls.xml
windows7-x64
3Portable_x...ls.xml
windows10-2004-x64
1Portable_x...up.exe
windows7-x64
3Portable_x...up.exe
windows10-2004-x64
10Portable_x...40.dll
windows7-x64
1Portable_x...40.dll
windows10-2004-x64
1Portable_x...ju.wsf
windows7-x64
1Portable_x...ju.wsf
windows10-2004-x64
1Portable_x...ed.xml
windows7-x64
3Portable_x...ed.xml
windows10-2004-x64
1Portable_x...to.xml
windows7-x64
3Portable_x...to.xml
windows10-2004-x64
1Portable_x...ng.xml
windows7-x64
3Portable_x...ng.xml
windows10-2004-x64
1Portable_x...ae.xml
windows7-x64
3Portable_x...ae.xml
windows10-2004-x64
1Portable_x...re.xml
windows7-x64
3Portable_x...re.xml
windows10-2004-x64
1Portable_x...rs.xml
windows7-x64
3Portable_x...rs.xml
windows10-2004-x64
1Portable_x...go.xml
windows7-x64
3Portable_x...go.xml
windows10-2004-x64
1Analysis
-
max time kernel
410s -
max time network
411s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
22-08-2024 12:15
Static task
static1
Behavioral task
behavioral1
Sample
Portable_x32_x64.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Portable_x32_x64.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Portable_x32_x64/Data/Language.pimx
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Portable_x32_x64/Data/Language.pimx
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Portable_x32_x64/Data/Main.ini
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Portable_x32_x64/Data/Main.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Portable_x32_x64/Data/Packaged/Main.xml
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Portable_x32_x64/Data/Packaged/Main.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Portable_x32_x64/Data/Packaged/Resource.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Portable_x32_x64/Data/Packaged/Resource.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Portable_x32_x64/Data/Packaged/Utils.xml
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
Portable_x32_x64/Data/Packaged/Utils.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Portable_x32_x64/Setup.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Portable_x32_x64/Setup.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Portable_x32_x64/msvcp140.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Portable_x32_x64/msvcp140.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Portable_x32_x64/res/cravats/broachOneill/badju.wsf
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Portable_x32_x64/res/cravats/broachOneill/badju.wsf
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Portable_x32_x64/res/cravats/broachOneill/bestinkSonarsBuzzed.xml
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
Portable_x32_x64/res/cravats/broachOneill/bestinkSonarsBuzzed.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Portable_x32_x64/res/cravats/broachOneill/busto.xml
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
Portable_x32_x64/res/cravats/broachOneill/busto.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Portable_x32_x64/res/cravats/broachOneill/gabblerTinderyBeaming.xml
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Portable_x32_x64/res/cravats/broachOneill/gabblerTinderyBeaming.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Portable_x32_x64/res/cravats/broachOneill/hebrewsNae.xml
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Portable_x32_x64/res/cravats/broachOneill/hebrewsNae.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/baluchKenlore.xml
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/baluchKenlore.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/ecuadorCapers.xml
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/ecuadorCapers.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/fungo.xml
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/fungo.xml
Resource
win10v2004-20240802-en
General
-
Target
Portable_x32_x64/res/cravats/broachOneill/hebrewsNae.xml
-
Size
23KB
-
MD5
ee59f6e22530309aa1c89e1826b010c9
-
SHA1
00d80241a03d28c42816868a2c4eecf4bd0d071f
-
SHA256
4159a3468eda56949355eb5fda59539d2f08bdaafa8fd5021e57761b1b5856a2
-
SHA512
fd84ee0feefecbe7207f5eab36ddb8e4615ee2e21e1e469775c6cfb60210e22916e789fb185375d3f24f57455e999f771a1a6a19f4febc1386931370f1111e99
-
SSDEEP
384:AoyJutAZGH54ktClFCYqwDnNEeuVXuu0x9nDRcbDWtYdl121kG/V/3Rq:/61lF5nNEHbYK4Ydl18kR
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Portable_x32_x64\res\cravats\broachOneill\hebrewsNae.xml"1⤵PID:3652