ton2.zip
- SHA256 a3e7f3ea8f906a546002bfd60a18dd732efb0d42f9fd056b1f1a9c91bf17486e
Static task
static1
Behavioral task
behavioral1
Sample
ton/aerobraking.dll
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ton/aerobraking.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
ton/documents.lnk
Resource
win7-20220812-en
windows7-x64
10 signatures
150 seconds
General
- Target ton2.zip
- Size 1.5MB
- Sample220912-zve4psebf4
- SHA256 a3e7f3ea8f906a546002bfd60a18dd732efb0d42f9fd056b1f1a9c91bf17486e
- MD5 d0475009b46446ab19707e0e10c6e264
- SHA1 b5a10e73931b8556d2093531c0d82a152bf9a1e0
- SHA512 1cb5e4dcdf0add15dc115c8b1acb1874ac16cc7dc923c0c44da4095e842eefec96da1dc218fcc13a5a7be09284de3cd6e3b749b3d7009b23bcacbf60322b89e8
- SSDEEP 24576:LSlNFnof5r3VYZ/JzInlTe3A1iKUXU/8xISs8ycd3Oditzwtn4WB0cY4r9Hl65pm:LYNofpi/NWEk/8xIBnditzwtn4WU4pHf
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
ton2.zip.zip 1.5MB
-
ton/aerobraking.dat.dll 2.8MB
-
ton/documents.lnk.lnk 1KB
ton/aerobraking.dat
- IMPHASH 8c7135d5af14c35536b780a7d9bf0878
- SHA256 2f18bfaeaae34c7bf895a432b297609edfaec4d449b5e3301252d32006ad3e1c
- MD5 a91ffc92b46a8ad90412ae91a4b7ef83
- SHA1 beb23a8718b77c6a6d46464e5467920c8f4f1ec7
- SHA512 7fb0b389850fb49b252c420d3487c5a4ffc7beb7935ca5e8ac6cc9bf5237dc7b8ac2742c2410d88e1efc9b0aa5ccb4d52d70731aec053ec06ec961f87162516c
- SSDEEP 49152:B4MeHCMgGF9ZbAfofXT8OLpDXEBD0zxOB5vIKpy8hQmf+8SNKb:B4RCMqkEGwm8JSNK
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
21148
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetCommandLineA
SetCurrentDirectoryA
CreateFileA
FindClose
FindFirstFileA
FindNextFileA
GetFileType
SetFileAttributesA
SetFileTime
CloseHandle
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
SwitchToFiber
CreateFiber
CreateNamedPipeA
WaitNamedPipeA
GetComputerNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
GetModuleHandleExW
WriteConsoleW
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
WideCharToMultiByte
WriteFile
LCMapStringW
FindFirstFileExA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
SetStdHandle
SetFilePointerEx
CreateFileW
RaiseException
CfS625T9f
HeNuB21N3
MiKvRo3xq
XqRsY25v
vcsfile
Name
.text
Size
94KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ton/documents.lnk
- SHA256 22546866f19add33035bcf1c135541606ff770df580650195dde6b69c55c37b3
- MD5 91b225881829c940ab5a76b61593e9cc
- SHA1 645790942cba7cb63f14891232b22ad978f1141e
- SHA512 1ecbe7dad9128c1ef7c3f9629124db33928a477f84e0a1c65e2afef8c03d9080397d2c1157a03ef942f59fb1f97f722a7d3f679250dc35fe4f0fa69d4ff819bc
- MD5 SHA1 SHA512