Overview
overview
10Static
static
51b94ce5e3f...bd.exe
windows7_x64
101b94ce5e3f...bd.exe
windows10_x64
103be0e1472a...c1.exe
windows7_x64
103be0e1472a...c1.exe
windows10_x64
104f9036848d...2c.exe
windows7_x64
104f9036848d...2c.exe
windows10_x64
10d33647e9d0...5a.exe
windows7_x64
10d33647e9d0...5a.exe
windows10_x64
10Static task
static1
Behavioral task
behavioral1
Sample
1b94ce5e3fb24f02cd970bf09031482d4e2bafebcaafc3f477a735d483e13dbd.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
1b94ce5e3fb24f02cd970bf09031482d4e2bafebcaafc3f477a735d483e13dbd.exe
Resource
win10v20210408
Behavioral task
behavioral3
Sample
3be0e1472ad786cfb4a11fb88470d92873d916eacb651d49e8a520ce8206e4c1.exe
Resource
win7v20210408
Behavioral task
behavioral4
Sample
3be0e1472ad786cfb4a11fb88470d92873d916eacb651d49e8a520ce8206e4c1.exe
Resource
win10v20210410
Behavioral task
behavioral5
Sample
4f9036848d0379bbfa74759957a24b6338568baa494d90fe671c1f71d8c0d12c.exe
Resource
win7v20210408
Behavioral task
behavioral6
Sample
4f9036848d0379bbfa74759957a24b6338568baa494d90fe671c1f71d8c0d12c.exe
Resource
win10v20210410
Behavioral task
behavioral7
Sample
d33647e9d09ffe352d2d6c6db4d48c11f2c04c4aab3deb0fd4c48a65cb47385a.exe
Resource
win7v20210408
General
-
Target
4698845684203520.zip
-
Size
11.2MB
-
MD5
2496e79cc3d5506d37398c34e158fda7
-
SHA1
b649b0ebf76fd551a6905abb55f9f4de24c35d96
-
SHA256
2750d82acc17245fb3f34ceb34d12d50090626ce0bb28902dd2dcc5db924dd48
-
SHA512
91f5606dfddf5d2860bd1a62375fac333ab0923e0a754588d0544b64da6c2638c242467eedd1e83ae22c51141e7c44254a94bd87132a5d0d936427ca78242fca
Malware Config
Signatures
-
autoit_exe 1 IoCs
AutoIT scripts compiled to PE executables.
Processes:
resource yara_rule static1/unpack001/4f9036848d0379bbfa74759957a24b6338568baa494d90fe671c1f71d8c0d12c autoit_exe -
NSIS installer 2 IoCs
Processes:
resource yara_rule static1/unpack001/d33647e9d09ffe352d2d6c6db4d48c11f2c04c4aab3deb0fd4c48a65cb47385a nsis_installer_1 static1/unpack001/d33647e9d09ffe352d2d6c6db4d48c11f2c04c4aab3deb0fd4c48a65cb47385a nsis_installer_2
Files
-
4698845684203520.zip.zip
Password: infected
-
1b94ce5e3fb24f02cd970bf09031482d4e2bafebcaafc3f477a735d483e13dbd.exe windows x86
-
3be0e1472ad786cfb4a11fb88470d92873d916eacb651d49e8a520ce8206e4c1.exe windows x86
-
4f9036848d0379bbfa74759957a24b6338568baa494d90fe671c1f71d8c0d12c.exe windows x64
-
89c8af8f69f3223d1eddb405647ea3df0aabcb8f5909e33026cdb353f41d7065
-
d33647e9d09ffe352d2d6c6db4d48c11f2c04c4aab3deb0fd4c48a65cb47385a.exe windows x86