Stolen_ImagesEvidence_08-25-2022_11-31-48.zip
- SHA256 4d17d739f32bb61e52d6f343b1ba81d1c5eb9c804a8f568a286f42da8f62d7f2
Static task
static1
Behavioral task
behavioral1
Sample
MAT/AWESOME.cmd
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
MAT/AWESOME.cmd
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
MAT/PPM.dll
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
MAT/PPM.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
documents048.lnk
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
documents048.lnk
Resource
win10v2004-20220812-en
windows10-2004-x64
4 signatures
150 seconds
General
- Target Stolen_ImagesEvidence_08-25-2022_11-31-48.zip
- Size 220KB
- Sample220825-nnvd9sdcf2
- SHA256 4d17d739f32bb61e52d6f343b1ba81d1c5eb9c804a8f568a286f42da8f62d7f2
- MD5 367f1bb50060bb6d179f8c95fee3d9a4
- SHA1 2d6dc753e76f2d3f596b5108111e52e484bde50c
- SHA512 24c0ea1f8ea0e20f39aa17f86c0a21e938e4025f29cef5a746878f52fd64bb0e161808102019ae12cdedf07a289329c067de3d52b2fd0f5530874131bd8d948c
- SSDEEP 6144:C9N+LuIsTL4iENKMhZskoAlV+zapd9i5yyUil/5wgtD+:pL4GrhZskbQw7eyyv/5wgd+
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
Stolen_ImagesEvidence_08-25-2022_11-31-48.zip.zip 220KB
-
Stolen_Images_Evidence.iso.iso 554KB
-
MAT/AWESOME.cmd.cmd .vbs 121B
-
MAT/DELAY.TXT5KB
-
MAT/HIGH.TXT116KB
-
MAT/LUNCH.TXT33KB
-
MAT/PPM.DAT.dll 269KB
-
MAT/REWARD.TXT24KB
-
MAT/TRICK.TXT13KB
-
MAT/jokes.txt17KB
-
documents048.lnk.lnk 1KB
Stolen_Images_Evidence.iso
- SHA256 e5de1279a3f59fdb54f18ce92261930a2ee7c742f72b20e1d2d759f557b739e5
- MD5 f1cb89607322b76d85946896e8eab44c
- SHA1 57cd932f8146184d30e94e79a2b37f0c4432de74
- SHA512 4306800b519f1fb35c0121b7b46f0f4eb84a7302c91f3a29c9ef47fa75926a460619a91323f9f972690f88f05e72435df91d5282b99cbb74fcc5d5d1f8d86f8f
- SSDEEP 12288:+5Q0OD/R+N7sdh1/I96AOUDugWZyM/UtQn:+qrD/bJI9hTDuTZyM/
- MD5 SHA1 SHA512 SSDEEP
MAT/AWESOME.cmd
- SHA256 9b9a5b560e5a70db8aba3cad39502b2d4e62c212e61ccc60e8429db4be614345
- MD5 013cad81b749fd850aa4b412ece91a93
- SHA1 f89d3f77286f8b5eb89efc699817b554938b10d3
- SHA512 2954e00f352117b8df8e85c6e0475cae83ff146c4288ba6dd5c055cb860f054a1a90b96c48dd1d99d22d7bd6f7ccfd5b8193ae378eac3035fa39580b1d81640b
- MD5 SHA1 SHA512
MAT/DELAY.TXT
- SHA256 f99d0c8666cf58c8aa9b1f4f7c74b146248175bb106adc236f6d541152cc9c06
- MD5 6fc658e4837de301072e8938efaf1d5f
- SHA1 caf6031cab70e120f557ed2fc1de5241542d6bfb
- SHA512 8e95611244eb51373b5e8ddef07085b07603345f7254f38e19b273ea1226aa8eb158a49a4234ed2a9b95d5e1bbf098e586b5edecc4689f7de1cd38e9e637c536
- SSDEEP 96:AoUmBxPrvNG/iX7yWI62MsL1n83HM791f5dHkO/jori:Af67j2k2MsFmHM7Hf5dHkOMri
- MD5 SHA1 SHA512 SSDEEP
MAT/HIGH.TXT
- SHA256 645a178b99450e5573fb6f15bde0fb4c6baf38820678cc0766133e24438e23c7
- MD5 6e5dc378531abf7c6f3c4784b790c936
- SHA1 0f6967e00e48baf5eea3b7dd6a010a582ca56375
- SHA512 60bddc70c9f3dadbb1fa920e76a052b7aac6e2d8642e8e60615d0ccd51696741848cc20777ad30f3047002c707efddc64f1414abc0d69085846a3775598c9e22
- SSDEEP 3072:M/E4XlDL66dBJDi+K56xE+7A0cY5ub7L6cErxFDWiJ+suVo:M84Xh63+66xcSY7e/vso
- MD5 SHA1 SHA512 SSDEEP
MAT/LUNCH.TXT
- SHA256 4714bb31cc095231bd3100c3285b08fd33b91cde4a2ab2b7930ca1d90adfb64c
- MD5 97f83c7339eed884866129e8ebc093a2
- SHA1 d8705e4869f06203b1b0cfb85466191328170d0f
- SHA512 54dd1029adc77e59a9fb3be71c74163a02f310e800000aec8f0436b73b748ede6382fc54fcb45f3d6d3820a6e8f436268293d649091232f4957b2a90606a2527
- SSDEEP 768:5eFcUzpnMLTkbpWjssdcjhMX+gbFaHEG14uZU+i8wbxhGE9gnbXFzHutKNsFVvvH:5eK0n5EjRdceX90HrVvshGE9gnpzHsKW
- MD5 SHA1 SHA512 SSDEEP
MAT/PPM.DAT
- SHA256 e117e8fd4b505fe240c60ab04870e9548d785b425a7946c3971df1c3ecdcf33e
- MD5 ce56d0c5365628d2a9bd2bf5b78d50fa
- SHA1 45b022a00479b85f3aeac1659e2e9f31785f3348
- SHA512 3574f119be2d339cca919b5e5196b625ae6ba016655e3f816571979628c8c80999a51e5604647aa6ea9d517ae1c0909e2dbe2b5dbd893cb864abd62e19c386ed
- SSDEEP 6144:s7sdh1/IOC6qzDycvWpCsihEgrqyOyMg+3Eth+n32K:s7sdh1/I96AOUDugWZyM/UtQnL
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
BSeGhKbGqPJB9oSc9T1Z
BuSZrL3Hj61INtDu0ZA3MmZpZ
CAU1JHv14IQDroozCqQc9X
CIYv7btptRjtIN9XPvvzybRjxfvkvg
CKtSyZCkhIJcDraiJl3UZTf
CWKlSjhL1OiEmEAPVxugoc55r99A6DX
Iw6JsAP09M8qL3psKq
J0QmVbkccN1OoC8ZBoaN7Y9qwjN6q
Mb8jcuNhOWH0NScN8Sl6tIFd3
O9b9rGZWQkqvy5AYHZdcbMkZF
Pr4dO956i34WeqbXKYzOWHRBwb
VfugdshfjhgyUAShjashgyusjaf
bumiqVK8TCVTQY0qRSs3xa
fhV4rLDQOW69vUfdcJBMj6QiUmuHb
gFD3bFd2Qqj9O1cGLcpBkJfXxlF4U
gOnFdLLDptANujnlg37JTOwyEaLx
gmfnLVxYWvdShNoqyK63u
j9Ge8yC4r7j8f8hKpL175rZYc
nViJ9JuFxH4qP1iA
p2M8rXqNn50ZDORjqxjgS0KIZ
pyzd4Mj5XFol7X8J2nLSBhdICGJ2j
toEvuNz3ql3uJFmPsWU
zDabDPx9QzvAdVrA3rsW7u
zK8NA6QqjF9gtvXQFYvQ
zXDEww9ihQIZAaw07p
Name
.text
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
155KB
Virtual Size
154KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.wleZ
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MAT/REWARD.TXT
- SHA256 326ddaab3011f726cfa97eef3da113b1c7115b0cb991f3d3a4ee9da18248446f
- MD5 c65a79125e308ed8620a06af53f4c002
- SHA1 6664be285f78ea7570813bf170445e7bd3b1a6c3
- SHA512 43dddc70ff87787221b294da35ac51214a3cfb6451bb58b618d33606b0391ffae4dcfe78f0b09d37efdfed63c775169739f24078d54d4130a50ac4c9134ffb52
- SSDEEP 384:hFxSj9dnkoXbgGHgCgWjM0MHj+CCW82DF+A/Q71prWL5vbC5JxOqjRs+:Aj9dkI00FgMUHrCW82DF+iW1F8jUS+
- MD5 SHA1 SHA512 SSDEEP
MAT/TRICK.TXT
- SHA256 c905c41e834b89af34eed511366d0cdeae42c0887b9ff9104f829473b0e0c59e
- MD5 524115bed8876696e85829aa49981d40
- SHA1 a831f73d7bc563a6ea7307fc6e03b162fc6ef893
- SHA512 783f273c25d67ed89a387b43b15e65792c2a0cfe2972e68a6cf3da67abdc1a92d545ebebf52e6ea81ff99f43035e041c458c182377d3433fa18e4d5358ec4a62
- SSDEEP 384:tciQaXhHGpDWoE8oQFKyP4p9QShvbGES1ah:2DaXhHkDWoRoywLQS0ESa
- MD5 SHA1 SHA512 SSDEEP
MAT/jokes.txt
- SHA256 44343467e05fa01c6d5c1ee8ae2a7b0e518c9e775dada64124c5182a46b2adb0
- MD5 c3fffe20e0197fbd3d6bce5318d9bb0b
- SHA1 b5f926f7cdd6a09bf6138d6f35785e1454de83b4
- SHA512 15f34dfd2f8f631792f9213c1d7fff6f35a23dfbb5c2d838491764973fc969cdff21127c4793dbfcfedc4e55aa1ae30c044bb13ddb59a1af24a6f58f2ac04e1d
- SSDEEP 384:605q8R+YSpMWydbBs/gDBpkiz6j0+H52hUkUkxGmNxaI:ydyhBnDjk46I+UhUDkEmraI
- MD5 SHA1 SHA512 SSDEEP
documents048.lnk
- SHA256 067900ab60a747a380c0f81cd711e2db4df01db3a07970310ba145151f00929b
- MD5 20d6da12a11a5103429ab6729cd65ad9
- SHA1 48942591da97ecca16ab7ae14aa29d865e80ac64
- SHA512 da0a6f7ea2c5bb976936363a27c5e47354045c6699e386ed7e0ab5f23267aad4f32bd5abc38eb8e25fcddbec27c72d0e76920c01ca30dda4b40381cbaa1d1424
- MD5 SHA1 SHA512