file
- SHA256 a3aa724dbfe8d66266d2a4a8cd7982442a3416d792529cff9751bb4e69f9ca81
Static task
static1
Behavioral task
behavioral1
Sample
core.bat
Resource
win7-20220223-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
core.bat
Resource
win10-en-20211208
windows10_x64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
planet64.dll
Resource
win7-20220223-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
planet64.dll
Resource
win10-20220223-en
windows10_x64
0 signatures
0 seconds
General
- Target file
- Size 617KB
- Sample220228-lvgewadhg2
- SHA256 a3aa724dbfe8d66266d2a4a8cd7982442a3416d792529cff9751bb4e69f9ca81
- MD5 0581e7a38780ac849064cf4e5e84d7ca
- SHA1 16bb43f4b7a3880b41fdb011452e10920b5c6f59
- SHA512 162a2a908f625d61bd3c6fe89f4cb9e4923a433526ccc4deb9f5e08e30748a7868c826dbfd47dd45dd213dbbf30440d6f083b51bc775085c63668ea7536b3fad
- SSDEEP 12288:fQHrRbsTP9qoTVIj8xjmHFlmxQIDbrlknec04kRdd8jQUsdhbY0btK28:f+9bEpVs8EHHjyrl+3ETyjQ7Dov
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
file.zip 617KB
-
core.bat184B
-
license.dat333KB
-
planet64.tmp.dll 595KB
core.bat
- SHA256 bcc176e2ec1bddb1518bcacb07fef99fe1812e204e990424549f11862aaa757c
- MD5 4da584cc0a5ded0c902627093ab8721b
- SHA1 a6bb30b50718813a72cbd58ba148bc3c9a17c3f0
- SHA512 d611696d95dd76f1c3f7ab90c370ccb734f1912ff340d28c5a050d0fb072c7914c3bd15ea30f8f2873fdb17f0b93da92eaa7eecc3b245e23c972c700777be804
- SSDEEP 3:lNeKDDcefoKwLVERhkiBVER5SL4A6moKmOjI9gLWOERyeSL4A6moKmOjIfAJLWOH:XpddwopPkFmdmoI9g5JkFmdmoIfo53
- MD5 SHA1 SHA512 SSDEEP
license.dat
- SHA256 96e657e1face63798a43e6210dba8d8c2f618d0be1230b95ab59d8bd23fc165a
- MD5 7eb64145636d2e8343d9077f15c11022
- SHA1 c0b221ca05431092bc1c789a33d199124c8fec1c
- SHA512 53171e09d3d146fe02e481944e1c5481f1bb48eaf66259d1b8bbbbf7a83efc4a73fc28089c7e1eacf221620cdff6ea7f1049c17720181fde88b4bdc27c1ea9b6
- SSDEEP 6144:EpQVFSaPRb80liV5IpoTVIf8xsubgI0U5wldSEKONiErESixF0BWe5:qQvFRb8FV58oTVIf8xNwHbdixFI5
- MD5 SHA1 SHA512 SSDEEP
planet64.tmp
- IMPHASH 1c59baf310f2350e10dd8476c3f162fc
- SHA256 5537366f1715dd509a927e3a0e7b37b51ca1ed289c81da7d6cf2c21f8ad50b7d
- MD5 c4a6cc66cad9a955f6fbd6ff6ec7f804
- SHA1 c06164863328cc0628b5fef8f41f3971244e4d49
- SHA512 66d6adc87d097c509a4f71bc71247b7e42fa0ad6ae3e9df9325ee97d3de79048e41f248b8c2a288dbf9bc70f066529a0542031eb5d52bdf320c3cda713d34867
- SSDEEP 6144:0chMqY+yya01Gks7/bRWTU2dA9AXu9b1ohrnlFV+I9b/AnK3+QKStcGV/:EX+ylbpJ2dAAu9poOa+ut
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
145092
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetOEMCP
GetSystemDefaultLangID
GetUserDefaultLangID
AreFileApisANSI
GetCurrentProcess
UnregisterApplicationRestart
SetFileApisToOEM
GetCommandLineW
GetSystemDefaultUILanguage
GetACP
GetTickCount
FlushProcessWriteBuffers
GetThreadErrorMode
GetLargePageMinimum
SwitchToThread
GetLastError
TlsAlloc
GetCommandLineA
IsDebuggerPresent
GetThreadLocale
UnregisterApplicationRecoveryCallback
VirtualAlloc
GetCurrentThread
GetErrorMode
IsSystemResumeAutomatic
GetCurrentProcessorNumber
RaiseException
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
MultiByteToWideChar
LoadResource
GetCurrentThreadId
FindResourceW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
lstrcmpiW
FreeLibrary
WriteConsoleW
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
ReadConsoleW
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
HeapReAlloc
HeapSize
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetProcessHeap
GetEnvironmentStringsW
CloseHandle
ReadFile
FindClose
GetTickCount64
SizeofResource
LoadLibraryA
RtlUnwind
LCMapStringW
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSectionAndSpinCount
SetLastError
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
GetCPInfo
GetStringTypeW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
EncodePointer
LCMapStringEx
user32
GetDesktopWindow
CreateMenu
GetClipboardSequenceNumber
CountClipboardFormats
SetProcessDPIAware
GetForegroundWindow
CloseClipboard
GetMessageTime
GetActiveWindow
GetClipboardViewer
GetDialogBaseUnits
InSendMessage
GetProcessWindowStation
DestroyCaret
GetMessageExtraInfo
GetShellWindow
AnyPopup
GetKBCodePage
SetCursor
LoadCursorW
CharNextW
EmptyClipboard
IsWow64Message
gdi32
GdiFlush
advapi32
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
shell32
InitNetworkAddressControl
ole32
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
OleUninitialize
CoTaskMemAlloc
oleaut32
VarUI4FromStr
winmm
waveInOpen
wininet
InternetQueryDataAvailable
DllMain
ahgeztp
aigckvngakbugp
aoptgehgyvhfe
brwrdoj
buciegjfiaerfgtut
cacvfsezxvpxl
ccobxqgaqgtfgyjh
cvqjqwd
czuoyauanhmhkfqk
dgevydlxmjqzqdmzn
eahdeuccjhg
egytrynspccnxmwmj
ewvqnifoywo
exradqti
fvytoqbee
gbffubmqt
gcleqbffzbflge
gqefitbe
gzqzotocbwvarz
hbxperwxjakm
idozpysy
iplyxmscfccs
iqemqduqct
jalpiceoh
jaopjemzfemetmvpv
jdacgylnnxbg
jmizmoudqbaqq
jwpfgwngf
jzpxycbrawkpnsdn
kdjfhrahksfcckcq
kkooyyjryr
kmdbrfdnnqf
lmlimmfrqutw
lmmkkuqyizob
lnpjajdlxnocs
lxrcdxzjybtf
lykjedjbpc
mabnqskffwpgsw
mhohutehkjuldt
misdpjgjqbjfr
mjvgbpx
myhgmurfmalhiwx
myosourl
ncxdkcoisifqhwt
nhclofwgpr
nhkrjxsatt
nmnkuknbkrrpief
nyugzjmugc
oownavkzwscg
opsteuzmdrurls
oyahcebtwsovnm
qcxblgj
qmvifjcfuqpuzzv
qwpyhbxmgxy
qxbfdcfim
rloiulsre
rqootiljxedlvnr
rreoovzcywztfoy
rtnpknpqmuggnivbw
rvjviboymvoruzn
scgcpljmijbgkyikh
scmgesiezk
sduytpjscuw
sptmibihuk
styzlcpjrelhcukdi
suvhbpnqycdmb
svlouksxgreuoqwqq
tdfuaqioxy
tmtmijscbebkxxje
uckpyafq
uhiaftyosqvhinbxl
uwdcsmvf
vbwkxnxlwtqfx
vcojqrat
vgdikkdbifjg
vlocrvd
vmtdsdoafmemdzvbq
vypknujekorxb
wcilptfzsgy
wdfxtxihmflb
wdqoglpdvvpu
wkrlwmpwoqy
wtyvlooqvwxv
wvaxxqh
wzgcijsxrwjjt
xejwxynysdwdrrg
xxuoktokckeaylg
yhvqqjvsioqgabv
zpvgkrta
zpwrcjptzzwg
Name
.text
Size
271KB
Virtual Size
270KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
283KB
Virtual Size
283KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ