Static task
static1
Behavioral task
behavioral1
Sample
Heart-Sender Priv8 Version/Heart-Sender-V1.2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Heart-Sender Priv8 Version/Heart-Sender-V1.2.exe
Resource
win10-20220901-en
Behavioral task
behavioral3
Sample
Heart-Sender Priv8 Version/Heart-Sender-V1.2.exe
Resource
win10v2004-20220812-en
General
-
Target
Heart-Sender Priv8 Version.zip
-
Size
387KB
-
MD5
a43b0ad4a3b89c94bbe85f54e9839472
-
SHA1
00aedb47137ed4a75400caea23a31797ea388d7c
-
SHA256
c30250a18d472e5c8379e8eaa939e0bf3cc87cfe991da6deba491a092afb0611
-
SHA512
e3aad6d5d5b01d203aa19b7facdccd59dc5569d22ebb6d2c6c87f60c1ec9820cdf66f0068b355386bb0a4d4229a31161cf97e16aa4d1568d0675def29ac1ab92
-
SSDEEP
12288:vYJcM8SLF5tTwvZKp7yXaJHJtjl05T9CK:vY2QLFjw0p7jJHJNl05YK
Malware Config
Signatures
Files
-
Heart-Sender Priv8 Version.zip.zip
Password: Heart2022
-
Heart-Sender Priv8 Version/Heart-Sender-V1.2.exe.exe windows x86
Password: Heart2022
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 109B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Heart-Sender Priv8 Version/HtmlAgilityPack.dll.dll windows x86
Password: Heart2022
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Heart-Sender Priv8 Version/Settings.ini
-
Heart-Sender Priv8 Version/Special gift for Mr. Joker989.txt
-
Heart-Sender Priv8 Version/license.txt