Behavioral task
behavioral1
Sample
The increasingly complicated Russia-Ukraine crisis explained.pdf
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
The increasingly complicated Russia-Ukraine crisis explained.pdf
Resource
win10v2004-20220310-en
Behavioral task
behavioral3
Sample
The increasingly complicated Russia-Ukraine crisis explained.pdf.exe
Resource
win7-20220311-en
General
-
Target
41dcaf4c90164544df7f6355059f9d31534a72ddcd310729332ef1af1e304a29
-
Size
8.5MB
-
MD5
0685c534129f6c16803965e24bb95157
-
SHA1
34dfdf16d13f974a06f46486ab4ad7034db8e9d5
-
SHA256
41dcaf4c90164544df7f6355059f9d31534a72ddcd310729332ef1af1e304a29
-
SHA512
d05f6f88d6acbbbb8ada8e8a17c6b638072ba203ffc44a61d24cf2eb387bbfeba1693bc690c636b1332aab2b1da6208a04a5ea259ef424e3ee1c840118230c69
Malware Config
Extracted
quasar
1.4.0
https://web.sunvn.net:4782
https://taisunwin.club:4782
https://web.sunwinvn.vip:4782
http://b29.bet:4782
https://playgo88.fun:4782
https://choigo88.us:4782
ca1a9340-65d7-49a9-b045-50c69210b55d
-
encryption_key
9C84151BA76B2D40C2A4C55E8D137720CE7C0137
-
install_name
PDF.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
PDF Reader
-
subdirectory
PDF Reader
Signatures
Files
-
41dcaf4c90164544df7f6355059f9d31534a72ddcd310729332ef1af1e304a29.zip
-
The increasingly complicated Russia-Ukraine crisis explained.pdf.pdf
-
https://www.vox.com/22917719/russia-ukraine-invasion-border-crisis-nato-explained
-
https://www.vox.com/authors/jen-kirby
-
https://www.vox.com/authors/jonathan-guyer
-
https://www.vox.com/2022/1/31/22910635/russia-ukraine-border-crisis-us-nato
-
https://www.wsj.com/articles/russia-moves-more-weaponry-toward-ukraine-keeps-the-west-guessing-11642161605
-
https://www.wsj.com/articles/russia-says-it-sees-little-scope-for-optimism-in-u-s-proposals-on-ukraine-11643290065
-
https://www.reuters.com/world/europe/exclusive-russia-moves-blood-supplies-near-ukraine-adding-us-concern-officials-2022-01-28/
-
https://www.bbc.com/news/world-us-canada-60396947
-
https://www.nytimes.com/live/2022/02/15/world/russia-ukraine-news?partner=slack&smid=sl-share#russia-says-some-troops-are-returning-to-their-bases-but-other-large-scale-military-drills-continue
-
https://www.cnn.com/2022/02/16/politics/russian-troops-biden-administration/index.html
-
https://www.vox.com/22917832/vladimir-putin-ukraine-military-invasion
-
https://www.vox.com/22894163/russia-ukraine-putin-biden-nato
-
https://www.theguardian.com/world/2021/dec/17/russia-issues-list-demands-tensions-europe-ukraine-nato
-
https://www.vox.com/22900113/nato-ukraine-russia-crisis-clinton-expansion
-
https://www.nytimes.com/2021/12/17/world/europe/russia-nato-security-deal.html
-
https://www.vox.com/2022/2/23/22948534/russia-ukraine-war-putin-explosions
-
https://www.nytimes.com/2022/02/02/world/europe/us-nato-response-russia-demands.html
-
https://www.kommersant.ru/doc/5218858
-
https://twitter.com/maxseddon/status/1494320352394051590?s=20&t=BjZ_z0-3Q2WVIEu4fcVRxA
-
https://www.armscontrol.org/factsheets/Ukraine-Nuclear-Weapons
-
https://www.crisisgroup.org/content/conflict-ukraines-donbas-visual-explainer
-
https://www.vox.com/2022/2/7/22916942/biden-lessons-russia-2014-invasion-ukraine-crimea
-
http://en.kremlin.ru/events/president/news/66181
-
https://www.nbcnews.com/politics/politics-news/biden-says-it-remains-be-seen-if-ukraine-will-be-n1270807
-
https://news.yahoo.com/as-the-russian-threat-grew-us-intelligence-ties-to-ukraine-deepened-225919359.html
-
https://www.theguardian.com/world/2008/apr/01/nato.georgia
-
https://www.nytimes.com/2022/01/13/us/politics/nato-ukraine.html
-
https://www.bbc.com/news/world-europe-48007487
-
https://www.vox.com/world/2019/9/24/20882359/trump-impeachment-ukraine-president-zelensky
-
https://foreignpolicy.com/2019/12/06/ukraine-peace-talks-russia-war-donbass/
-
https://www.theguardian.com/world/2020/mar/06/ukraine-president-volodymyr-zelenskiy-gives-putin-one-year-strike-deal-end-war
-
https://www.pbs.org/newshour/world/ukraine-president-says-nation-is-ready-to-join-nato
-
https://www.iri.org/resources/iri-ukraine-poll-shows-support-for-eu-nato-membership-concerns-over-economy-and-vaccines-for-covid-19/
-
https://www.csis.org/analysis/russian-and-ukrainian-spring-2021-war-scare
-
https://www.washingtonpost.com/world/europe/ukraine-summit-biden-putin/2021/06/13/b6783866-c9f8-11eb-8708-64991f2acf28_story.html
-
https://www.vox.com/22535041/biden-putin-summit-geneva-navalny-nuclear
-
https://www.vox.com/22639474/afghanistan-nato-europe-refugees-germany-uk
-
https://www.politico.com/news/2021/10/29/biden-submarine-france-clumsy-517643
-
https://apnews.com/article/business-global-trade-brexit-northern-ireland-european-union-1a5471e81db67b641f313218ff6cd061
-
https://www.vox.com/2021/12/8/22810520/germany-government-olaf-scholz-chancellor-greens-fdp
-
https://www.reuters.com/business/energy/why-europe-faces-climbing-energy-bills-2022-02-03/
-
https://www.politico.eu/article/how-france-pivoted-to-the-right/
-
https://www.nytimes.com/live/2022/02/07/world/russia-ukraine-news
-
https://www.cnn.com/2022/02/07/politics/biden-scholz-meeting-ukraine/index.html
-
https://www.vox.com/2014/8/29/6082769/one-chart-why-putin-invading-ukraine
-
https://www.npr.org/2021/05/21/999196021/biden-wants-a-stable-predictable-relationship-with-russia-thats-complicated
-
https://www.brookings.edu/blog/order-from-chaos/2022/02/16/scholz-holds-his-ground-in-putins-den/
-
https://apnews.com/article/russia-ukraine-russia-diplomacy-emmanuel-macron-europe-9dd7eb560d26a81306604dcb1c81bddb
-
https://twitter.com/maxseddon/status/1468268999851089921?s=20&t=eo9KXgN4fmPiV9ATuqbXAw
-
https://abcnews.go.com/International/russia-makes-sweeping-demands-security-guarantees-us-amid/story?id=81821816
-
https://www.reuters.com/world/top-diplomats-us-russia-meet-geneva-soaring-ukraine-tensions-2022-01-21/
-
https://www.cnn.com/2022/01/26/politics/us-russia-ukraine/index.html
-
https://twitter.com/maxseddon/status/1494319540108288002?s=20&t=BjZ_z0-3Q2WVIEu4fcVRxA
-
https://twitter.com/maxseddon/status/1494319540108288002
-
https://www.rferl.org/a/russia-ukraine-crimea/29790037.html
-
https://www.usnews.com/news/world/articles/2017-11-24/russia-has-deployed-thousands-of-tanks-troops-to-ukraine-top-official-says
-
https://www.lawfareblog.com/why-did-russia-escalate-its-gray-zone-conflict-ukraine
-
https://www.washingtonpost.com/world/national-security/russian-military-was-behind-notpetya-cyberattack-in-ukraine-cia-concludes/2018/01/12/048d8506-f7ca-11e7-b34a-b85626af34ef_story.html
-
https://jsis.washington.edu/news/russia-disinformation-ukraine/
-
https://www.csis.org/analysis/russias-possible-invasion-ukraine
-
https://www.nbcnews.com/politics/national-security/if-russia-launches-attack-ukraine-what-might-it-look-here-n1287369
-
https://www.nytimes.com/2022/02/05/us/politics/russia-ukraine-invasion.html
-
https://www.nytimes.com/2019/10/13/world/middleeast/russia-bombing-syrian-hospitals.html
-
https://www.nytimes.com/2022/01/14/us/politics/russia-ukraine-biden-military.html
-
https://www.wsj.com/articles/u-s-orders-3-000-troops-to-bolster-european-allies-in-russia-ukraine-crisis-11643810404
-
https://www.reuters.com/world/europe/exclusive-us-send-3000-additional-troops-poland-officials-say-2022-02-11/
-
https://www.nytimes.com/2022/02/14/world/europe/us-closing-kyiv-embassy.html
-
https://www.vox.com/22916773/russia-ukraine-sanctions-putin
-
https://www.vox.com/22881709/nord-stream-2-russia-ukraine-germany-united-states-cruz
-
https://www.vox.com/22902846/ukraine-russia-nato-zelensky-poroshenko
-
https://kyivindependent.com/about/
-
http://vox.com/pages/support-now?itm_campaign=default&itm_medium=article&itm_source=article-footer
-
https://www.vox.com/explainers
- Show all
-
-
The increasingly complicated Russia-Ukraine crisis explained.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 498KB - Virtual size: 498KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ