Overview
overview
10Static
static
3Portable_x32_x64.zip
windows7-x64
1Portable_x32_x64.zip
windows10-2004-x64
1Portable_x...e.pimx
windows7-x64
3Portable_x...e.pimx
windows10-2004-x64
3Portable_x...in.ini
windows7-x64
1Portable_x...in.ini
windows10-2004-x64
1Portable_x...in.xml
windows7-x64
3Portable_x...in.xml
windows10-2004-x64
1Portable_x...ce.dll
windows7-x64
1Portable_x...ce.dll
windows10-2004-x64
1Portable_x...ls.xml
windows7-x64
3Portable_x...ls.xml
windows10-2004-x64
1Portable_x...up.exe
windows7-x64
3Portable_x...up.exe
windows10-2004-x64
10Portable_x...40.dll
windows7-x64
1Portable_x...40.dll
windows10-2004-x64
1Portable_x...ju.wsf
windows7-x64
1Portable_x...ju.wsf
windows10-2004-x64
1Portable_x...ed.xml
windows7-x64
3Portable_x...ed.xml
windows10-2004-x64
1Portable_x...to.xml
windows7-x64
3Portable_x...to.xml
windows10-2004-x64
1Portable_x...ng.xml
windows7-x64
3Portable_x...ng.xml
windows10-2004-x64
1Portable_x...ae.xml
windows7-x64
3Portable_x...ae.xml
windows10-2004-x64
1Portable_x...re.xml
windows7-x64
3Portable_x...re.xml
windows10-2004-x64
1Portable_x...rs.xml
windows7-x64
3Portable_x...rs.xml
windows10-2004-x64
1Portable_x...go.xml
windows7-x64
3Portable_x...go.xml
windows10-2004-x64
1Analysis
-
max time kernel
439s -
max time network
445s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
22-08-2024 12:15
Static task
static1
Behavioral task
behavioral1
Sample
Portable_x32_x64.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Portable_x32_x64.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Portable_x32_x64/Data/Language.pimx
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Portable_x32_x64/Data/Language.pimx
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Portable_x32_x64/Data/Main.ini
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Portable_x32_x64/Data/Main.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Portable_x32_x64/Data/Packaged/Main.xml
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Portable_x32_x64/Data/Packaged/Main.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Portable_x32_x64/Data/Packaged/Resource.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Portable_x32_x64/Data/Packaged/Resource.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Portable_x32_x64/Data/Packaged/Utils.xml
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
Portable_x32_x64/Data/Packaged/Utils.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Portable_x32_x64/Setup.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Portable_x32_x64/Setup.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Portable_x32_x64/msvcp140.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Portable_x32_x64/msvcp140.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Portable_x32_x64/res/cravats/broachOneill/badju.wsf
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Portable_x32_x64/res/cravats/broachOneill/badju.wsf
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Portable_x32_x64/res/cravats/broachOneill/bestinkSonarsBuzzed.xml
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
Portable_x32_x64/res/cravats/broachOneill/bestinkSonarsBuzzed.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Portable_x32_x64/res/cravats/broachOneill/busto.xml
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
Portable_x32_x64/res/cravats/broachOneill/busto.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Portable_x32_x64/res/cravats/broachOneill/gabblerTinderyBeaming.xml
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Portable_x32_x64/res/cravats/broachOneill/gabblerTinderyBeaming.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Portable_x32_x64/res/cravats/broachOneill/hebrewsNae.xml
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Portable_x32_x64/res/cravats/broachOneill/hebrewsNae.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/baluchKenlore.xml
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/baluchKenlore.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/ecuadorCapers.xml
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/ecuadorCapers.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/fungo.xml
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/fungo.xml
Resource
win10v2004-20240802-en
General
-
Target
Portable_x32_x64/res/cravats/broachOneill/shaleDashikiBajoire/baluchKenlore.xml
-
Size
70KB
-
MD5
be553e5b5288fcfc8115570b26c8c849
-
SHA1
fa5b7fbd3c297e4f540ea15944fa0a74c487eeb5
-
SHA256
cf715dfc6cbbc90a78b8d5c9c656b818026baa666feda2595865c126b68c142d
-
SHA512
4845ef68c356b3ccb993d162b4b0ff1f99d2a88fdcc5aa3bcb28115a2ecc8c1c1802835d30a8b019ff88226c07107bae0ff7edc689827c59173701ebb38e0cb0
-
SSDEEP
1536:+tyzXm9kPizNKupyIw8hTF4+z2Vr43JJAusaEhMEpJuu:yyS9kPizNKeyIw8Vqj4J+aEhTJj
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Portable_x32_x64\res\cravats\broachOneill\shaleDashikiBajoire\baluchKenlore.xml"1⤵PID:3648