Desktop.zip
- SHA256 0e859acbd03e59eae287b124803ec052cf027b519e608c7ccfd920044b9ee1c7
Static task
static1
Behavioral task
behavioral1
Sample
Desktop.zip
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Desktop.zip
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
7za.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
7za.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
Behavioral task
behavioral5
Sample
New Folder.lnk
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral6
Sample
New Folder.lnk
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
Behavioral task
behavioral7
Sample
arch.7z
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral8
Sample
arch.7z
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
- Target Desktop.zip
- Size 1.2MB
- Sample220526-t3xe3ahack
- SHA256 0e859acbd03e59eae287b124803ec052cf027b519e608c7ccfd920044b9ee1c7
- MD5 7092d2c4b041db8009962e865d6c5cd7
- SHA1 11838141f869e74225be8bd0d4c866cb46ef0248
- SHA512 34325e0b684e8c3a399f323f2292c3f75b1d558cf01590556be7c1aba7a8e95d58a2a3234030c67a835516cabad4d5f27874ff377f79b3d807797a1cbec9de2d
- SSDEEP 12288:eAdQRBT9mzkfi8maRVPWJc1n9+S36fZc5zIj4HrpsSOYe9q5buSYfolWCpKffKzq:W9f9PWE9eC5Ej0/LEolbxNQ
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
Desktop.zip.zip 1.2MB
-
7za.exe.exe 574KB
-
New Folder.lnk.lnk 1KB
-
arch.7z.7z 929KB
7za.exe
- IMPHASH 15847eb10d7d06dcd5980e8a9b786fd6
- SHA256 c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf
- MD5 42badc1d2f03a8b1e4875740d3d49336
- SHA1 cee178da1fb05f99af7a3547093122893bd1eb46
- SHA512 6bc519a7368ee6bd8c8f69f2d634dd18799b4ca31fbc284d2580ba625f3a88b6a52d2bc17bea0e75e63ca11c10356c47ee00c2c500294abcb5141424fc5dc71c
- SSDEEP 12288:myyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRI:mKvyNhXCV4E8BXAfrnkcAqU0A
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
446284
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
oleaut32
SysAllocString
SysAllocStringByteLen
VariantClear
VariantCopy
SysFreeString
user32
CharLowerA
CharUpperA
CharLowerW
CharPrevExA
CharNextA
CharUpperW
kernel32
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetConsoleCtrlHandler
FileTimeToLocalFileTime
GetCommandLineW
SetFileApisToOEM
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
SetConsoleMode
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
GetWindowsDirectoryW
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
SetFileAttributesW
RemoveDirectoryW
MoveFileW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathA
SearchPathW
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
CreateFileA
GetFileSize
SetFilePointer
DeviceIoControl
ReadFile
WriteFile
GetCurrentProcess
GetProcAddress
CompareFileTime
FileTimeToSystemTime
GetSystemInfo
GlobalMemoryStatus
GetModuleHandleA
DosDateTimeToFileTime
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
WaitForMultipleObjects
OpenEventA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetTickCount
GetProcessTimes
LocalFileTimeToFileTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
RtlUnwind
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
ExitProcess
TlsAlloc
SetUnhandledExceptionFilter
TerminateProcess
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
Name
.text
Size
483KB
Virtual Size
483KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
27KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.sxdata
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
New Folder.lnk
- SHA256 315b3d80643da454b40cc938a0e8794f90ccbd05868e55b4848cacbf047850ae
- MD5 fd21be3db76b714cb4dfae779d1ada1f
- SHA1 8157b198c00de0a19b1d02ae7b76c78857baccd2
- SHA512 1c06c3094c47bbfa187f0bb9cb85e76ccc3e715048a0459382c8da28721e774de64a132c716b1bcce6175d769fce296d82e864b90b8aa9e8b27678a40336e0e2
- MD5 SHA1 SHA512
arch.7z
- SHA256 7b3e94fd74a6d597b6cd20fb40d56ebaf328dbe2f3df38960e4c31fe2a5b9ef4
- MD5 e04a4314054f89ff5d8624126138b788
- SHA1 9aa09f4e7a4f9c889cf36e416177faf9f81ef1a3
- SHA512 d415ab362abded697ee0b63838c62b2ace2d9698577bec1ac5acea62510c262240de21ef0d120dd7043eebb32b6fcdda32d5a1bbcde021d970da9ba6fffda69d
- SSDEEP 12288:8AdQtBT1mz+9iQi4RVPSlc1nreSzmfXc5jIjs7Fvco+Ye/q57uWY3y:uZ9fPSYr+E5Ujyr3My
- MD5 SHA1 SHA512 SSDEEP