Overview
overview
10Static
static
5Trojan.Asprox.zip
windows10-2004-x64
1Trojan.Asprox.zip
windows11-ltsc_2024-x64
1newAsprox.zip
windows10-2004-x64
1newAsprox.zip
windows11-ltsc_2024-x64
1WalmartFor...18.exe
windows10-2004-x64
5WalmartFor...18.exe
windows11-ltsc_2024-x64
5out.exe
windows10-2004-x64
out.exe
windows11-ltsc_2024-x64
d0000.dll
windows10-2004-x64
10d0000.dll
windows11-ltsc_2024-x64
10olderAsprox.zip
windows10-2004-x64
1olderAsprox.zip
windows11-ltsc_2024-x64
180000.dll
windows10-2004-x64
780000.dll
windows11-ltsc_2024-x64
8US_Airways...oc.exe
windows10-2004-x64
7US_Airways...oc.exe
windows11-ltsc_2024-x64
5Analysis
- max time kernel
150s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/09/2026, 03:31
Behavioral task
behavioral1
Sample
Trojan.Asprox.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Trojan.Asprox.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
newAsprox.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
newAsprox.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
WalmartForm_San_Antonio_78218.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
WalmartForm_San_Antonio_78218.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
out.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
out.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
d0000.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
d0000.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
olderAsprox.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
olderAsprox.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
80000.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
80000.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
US_Airways_E-Ticket_Print_Doc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
US_Airways_E-Ticket_Print_Doc.exe
Resource
win11ltsc2024-20260709-en
General
- Target WalmartForm_San_Antonio_78218.exe
- Size 90KB
- Sample260907-d3anasbr5t
- SHA256 f1b8a10f27cc597281bdd423fd7e9829ecbf036ebe6e7e00d054c55f01454bd8
- MD5 d062d420e2ac73b0211afe30063807fa
- SHA1 c3ba72fb3f48bd3b4a5fe8b04e3f8b8398e624c1
- SHA512 761ec98c589349e4e511fc255531c5f074b810c56b9b3cec1d9477ec383686e6b8c1d99840f67540c8e83ededc5abf573371b2743ae5a5f58c3900fe9bd8e599
- SSDEEP 1536:eTFOnhmTIgT+jv+d6tS5s8li+C89pjIk7xpPnXv0HX0cFNFXf3FBsThnzUsHR3ey:eBTdPj22FLnIS/0HEQFIn5HRg/
- TLSH T1B69302C8D9BD0160D4108AB561EFF9AA8637EF1F10711643B62DF432587374A92E4DFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral6/memory/860-0-0x0000000000400000-0x000000000042E000-memory.dmp upx behavioral6/memory/860-2-0x0000000000400000-0x000000000042E000-memory.dmp upx - Program crash 1 IoCs
pid pid_target Process procid_target 4756 860 WerFault.exe 87 - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WalmartForm_San_Antonio_78218.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\WalmartForm_San_Antonio_78218.exe"C:\Users\Admin\AppData\Local\Temp\WalmartForm_San_Antonio_78218.exe"1⤵
- System Location Discovery: System Language Discovery
PID:860 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 860 -s 5242⤵
- Program crash
PID:4756
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 860 -ip 8601⤵PID:4828