Stolen_Images_Evidence.iso
- SHA256 a70e06ead811f0b9039a23a53d794c8b320c099f76279298cd7f79549be3ed70
Static task
static1
Behavioral task
behavioral1
Sample
SUE/CI.dll
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
SUE/CI.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
SUE/HEIGHTS.cmd
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
SUE/HEIGHTS.cmd
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
documents027.lnk
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
documents027.lnk
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target Stolen_Images_Evidence.iso
- Size 788KB
- Sample220824-pq7caaedg3
- SHA256 a70e06ead811f0b9039a23a53d794c8b320c099f76279298cd7f79549be3ed70
- MD5 a81ff8f6529ff6775523d04f3fe96ecf
- SHA1 70eeea6b7516eaf839780b1d979a46c9d9e46e91
- SHA512 8baa52ee32e59d306b6ea09c5d4841038670e5261e40fb28ca1f5faa3b82f9230672e83ae453efbf9da50714950e1abe1d1c8c5627f1201eb18e69b074aa2bfe
- SSDEEP 12288:J+9537sdh1/I96BOUDugWZyM/UtQnx9XE0OD/w:AqJI9QTDuTZyM/RtErD/w
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
Stolen_Images_Evidence.iso.iso 788KB
-
SUE/BOBBY.TXT24KB
-
SUE/BUF.TXT13KB
-
SUE/CI.DAT.dll 269KB
-
SUE/HEIGHTS.cmd.cmd .vbs 128B
-
SUE/LAZY.TXT5KB
-
SUE/MIC.TXT33KB
-
SUE/MUST.TXT52KB
-
SUE/RESOLVE.TXT73KB
-
SUE/REVISED.TXT116KB
-
SUE/WINS.TXT105KB
-
SUE/jokes.txt17KB
-
documents027.lnk.lnk 1KB
SUE/BOBBY.TXT
- SHA256 326ddaab3011f726cfa97eef3da113b1c7115b0cb991f3d3a4ee9da18248446f
- MD5 c65a79125e308ed8620a06af53f4c002
- SHA1 6664be285f78ea7570813bf170445e7bd3b1a6c3
- SHA512 43dddc70ff87787221b294da35ac51214a3cfb6451bb58b618d33606b0391ffae4dcfe78f0b09d37efdfed63c775169739f24078d54d4130a50ac4c9134ffb52
- SSDEEP 384:hFxSj9dnkoXbgGHgCgWjM0MHj+CCW82DF+A/Q71prWL5vbC5JxOqjRs+:Aj9dkI00FgMUHrCW82DF+iW1F8jUS+
- MD5 SHA1 SHA512 SSDEEP
SUE/BUF.TXT
- SHA256 c905c41e834b89af34eed511366d0cdeae42c0887b9ff9104f829473b0e0c59e
- MD5 524115bed8876696e85829aa49981d40
- SHA1 a831f73d7bc563a6ea7307fc6e03b162fc6ef893
- SHA512 783f273c25d67ed89a387b43b15e65792c2a0cfe2972e68a6cf3da67abdc1a92d545ebebf52e6ea81ff99f43035e041c458c182377d3433fa18e4d5358ec4a62
- SSDEEP 384:tciQaXhHGpDWoE8oQFKyP4p9QShvbGES1ah:2DaXhHkDWoRoywLQS0ESa
- MD5 SHA1 SHA512 SSDEEP
SUE/CI.DAT
- SHA256 dc99035338b0a998f96929920915cab95a2039f15f3c8ad9c2b255995a7c992d
- MD5 ac73844b1a25681749c910611c30cc20
- SHA1 30fddf9102b939ab716e2263d22bba6ce8d9d1b2
- SHA512 ab54bb76435a6a11368cfe834049ef8c60d6d60384bd2a0d799af73b1801bb3c23d268d1e42f1724d5f3caf993e36ee0d58912ab5babf93ccc78fe66fb4d47b6
- SSDEEP 6144:V7sdh1/IOC6RzDycvWpCsihEgrqyOyMg+3Eth+n32a:V7sdh1/I96BOUDugWZyM/UtQnL
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
BSeGhKbGqPJB9oSc9T1Z
BuSZrL3Hj61INtDu0ZA3MmZpZ
CAU1JHv14IQDroozCqQc9X
CIYv7btptRjtIN9XPvvzybRjxfvkvg
CKtSyZCkhIJcDraiJl3UZTf
CWKlSjhL1OiEmEAPVxugoc55r99A6DX
Iw6JsAP09M8qL3psKq
J0QmVbkccN1OoC8ZBoaN7Y9qwjN6q
Mb8jcuNhOWH0NScN8Sl6tIFd3
O9b9rGZWQkqvy5AYHZdcbMkZF
Pr4dO956i34WeqbXKYzOWHRBwb
VfugdshfjhgyUAShjashgyusjaf
bumiqVK8TCVTQY0qRSs3xa
fhV4rLDQOW69vUfdcJBMj6QiUmuHb
gFD3bFd2Qqj9O1cGLcpBkJfXxlF4U
gOnFdLLDptANujnlg37JTOwyEaLx
gmfnLVxYWvdShNoqyK63u
j9Ge8yC4r7j8f8hKpL175rZYc
nViJ9JuFxH4qP1iA
p2M8rXqNn50ZDORjqxjgS0KIZ
pyzd4Mj5XFol7X8J2nLSBhdICGJ2j
toEvuNz3ql3uJFmPsWU
zDabDPx9QzvAdVrA3rsW7u
zK8NA6QqjF9gtvXQFYvQ
zXDEww9ihQIZAaw07p
Name
.text
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
155KB
Virtual Size
154KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.Cuuj
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SUE/HEIGHTS.cmd
- SHA256 3315d7a3bfe3943d19dc4bb08df5a262187d154532758bfaa0d50cb1a0fb08cb
- MD5 147fa60d57e818a90fa96ca74e725f47
- SHA1 0b35ee255fd056c3f8d517df2d8886f11c5c26fe
- SHA512 2792cb13879c938aedf3fe4250f1ba34fa4e24cc10f99d1ef0657c8294a10a3d30023c37162d7df85346bc126b8d0bc0b9de2b831e476667f99f1bb5d13a8ddd
- MD5 SHA1 SHA512
SUE/LAZY.TXT
- SHA256 f99d0c8666cf58c8aa9b1f4f7c74b146248175bb106adc236f6d541152cc9c06
- MD5 6fc658e4837de301072e8938efaf1d5f
- SHA1 caf6031cab70e120f557ed2fc1de5241542d6bfb
- SHA512 8e95611244eb51373b5e8ddef07085b07603345f7254f38e19b273ea1226aa8eb158a49a4234ed2a9b95d5e1bbf098e586b5edecc4689f7de1cd38e9e637c536
- SSDEEP 96:AoUmBxPrvNG/iX7yWI62MsL1n83HM791f5dHkO/jori:Af67j2k2MsFmHM7Hf5dHkOMri
- MD5 SHA1 SHA512 SSDEEP
SUE/MIC.TXT
- SHA256 4714bb31cc095231bd3100c3285b08fd33b91cde4a2ab2b7930ca1d90adfb64c
- MD5 97f83c7339eed884866129e8ebc093a2
- SHA1 d8705e4869f06203b1b0cfb85466191328170d0f
- SHA512 54dd1029adc77e59a9fb3be71c74163a02f310e800000aec8f0436b73b748ede6382fc54fcb45f3d6d3820a6e8f436268293d649091232f4957b2a90606a2527
- SSDEEP 768:5eFcUzpnMLTkbpWjssdcjhMX+gbFaHEG14uZU+i8wbxhGE9gnbXFzHutKNsFVvvH:5eK0n5EjRdceX90HrVvshGE9gnpzHsKW
- MD5 SHA1 SHA512 SSDEEP
SUE/MUST.TXT
- SHA256 16904ac868da4db03c95b3b8dc7458e73698f495643af8879423e8eb3609a4cd
- MD5 f591248ef99289b9db1f9b9271a27a22
- SHA1 87a73fa05fb8b8aa28c6a1170f8acca2a4d20f7d
- SHA512 fe865f170f4b2b406f8ab42f8ba9b1d9e472261eb7a751f0494cda0ff06fa6dd40f2858b2cc65630cb54db03a0ba711737ec391038e8446f2ab281d9c537d31f
- SSDEEP 1536:yUAl0b1QlVnuKIbiFlfOxAKgbAche3TChlcC2/bGznD:yoGnf/fOx8bAcs3Tmcn/bKD
- MD5 SHA1 SHA512 SSDEEP
SUE/RESOLVE.TXT
- SHA256 ffed18ff5811f6926b13d0b5fd0b445f21653441a000da3e4e4049e0d43b4d48
- MD5 c3ea1f2eb55690b5fd60d48eacf14825
- SHA1 e26a0b73ef1809a85c268db964b02a185ec36d02
- SHA512 7b8a2aa1fd0adb9d7ca04a8762eff1417de52f3dff9b01b9f31c7f38ff187d691999297efa333d7ff50724916bdb22f9f4a030fe3b178ba612959360b540e9c3
- SSDEEP 1536:MgKBTWJvqZn/RC6xclIx/hogJ6+eaPu89fYZWcBHzufZi9bOB50ggMMFk:MtBaJg/R5xc2x/hoh+e8u8BYZLBHzGUG
- MD5 SHA1 SHA512 SSDEEP
SUE/REVISED.TXT
- SHA256 645a178b99450e5573fb6f15bde0fb4c6baf38820678cc0766133e24438e23c7
- MD5 6e5dc378531abf7c6f3c4784b790c936
- SHA1 0f6967e00e48baf5eea3b7dd6a010a582ca56375
- SHA512 60bddc70c9f3dadbb1fa920e76a052b7aac6e2d8642e8e60615d0ccd51696741848cc20777ad30f3047002c707efddc64f1414abc0d69085846a3775598c9e22
- SSDEEP 3072:M/E4XlDL66dBJDi+K56xE+7A0cY5ub7L6cErxFDWiJ+suVo:M84Xh63+66xcSY7e/vso
- MD5 SHA1 SHA512 SSDEEP
SUE/WINS.TXT
- SHA256 d4d3d6be184132b260666780413ffb65accd397f6e401cbc0f35fbfcd6d4ddd1
- MD5 5964403f775caf81eb98b5a2b03785fc
- SHA1 0f0eeba7604f34ad3e14bd7f8240e9e319c7ca98
- SHA512 3d186fc81a96d21f35a4358960d0fe3a5a9b3da3c79e5598c8b0f9772151edd530f63030d47e317d994972a56aaf409d1c90eee5f788a125525a3b4f936eba04
- SSDEEP 3072:eaFqTybqVSNgg23QTCcX+f3kywbHkRryY:eCqjJc1bEP
- MD5 SHA1 SHA512 SSDEEP
SUE/jokes.txt
- SHA256 44343467e05fa01c6d5c1ee8ae2a7b0e518c9e775dada64124c5182a46b2adb0
- MD5 c3fffe20e0197fbd3d6bce5318d9bb0b
- SHA1 b5f926f7cdd6a09bf6138d6f35785e1454de83b4
- SHA512 15f34dfd2f8f631792f9213c1d7fff6f35a23dfbb5c2d838491764973fc969cdff21127c4793dbfcfedc4e55aa1ae30c044bb13ddb59a1af24a6f58f2ac04e1d
- SSDEEP 384:605q8R+YSpMWydbBs/gDBpkiz6j0+H52hUkUkxGmNxaI:ydyhBnDjk46I+UhUDkEmraI
- MD5 SHA1 SHA512 SSDEEP
documents027.lnk
- SHA256 9f38470256500785d8827168156b4f720b264fc57c69e83b06638d997b89b1aa
- MD5 18db1fbff146269e82c928a7e85d9c2c
- SHA1 b213855c81bd4d00c0ddfa918d6b7da0847acec2
- SHA512 df885a7dd9f01abc68ecaedfa1679f15209fe1b6216d9123c528b0650a8a6153f86f4c3a0c14b0e4239600b2e16a3fb9c6c49275c469acad281c04ac87a1493e
- MD5 SHA1 SHA512