Overview
overview
10Static
static
invoice.lnk
windows7-x64
3invoice.lnk
windows10-2004-x64
3just/beWho.dll
windows7-x64
10just/beWho.dll
windows10-2004-x64
10just/not.txt
windows7-x64
1just/not.txt
windows10-2004-x64
1just/thenThese.js
windows7-x64
3just/thenThese.js
windows10-2004-x64
1just/twoThese.bat
windows7-x64
1just/twoThese.bat
windows10-2004-x64
1just/well.txt
windows7-x64
1just/well.txt
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
invoice.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
invoice.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
just/beWho.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
just/beWho.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
just/not.txt
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
just/not.txt
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
just/thenThese.js
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
just/thenThese.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
just/twoThese.bat
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
just/twoThese.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
just/well.txt
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
just/well.txt
Resource
win10v2004-20220812-en
General
-
Target
invoice(91522)#123648.zip
-
Size
197KB
-
MD5
2708d0b4f80a9a318c3b7524b644b249
-
SHA1
c1d2157bb5fe5dd8ef459671f17b9b4bd63f1d53
-
SHA256
8b18c654f77faf068dcaee896ba1e9038e43f4237d4db715569a74aa3ddea69a
-
SHA512
9e216298b928c98a51e3211ff553916f05a1ddb3b5fb94f2a27d74b38f62aba2f0811398a07d254e76de713e522b064ef0c04b80dce472ac95dbcda291ec7b7b
-
SSDEEP
6144:D/PG3FjyvwKMlew2z0rYCBXv8x1TTcKEiPAfjcFFFH:LG1jq2ew2z0cCB/gT6iqgFFH
Malware Config
Signatures
Files
-
invoice(91522)#123648.zip.zip
Password: invoice0915
-
invoice#741133.iso.iso
Password: invoice0915
-
invoice.lnk.lnk
-
just/beWho.db.dll .js windows x64
Password: invoice0915
-
just/not.txt
-
just/thenThese.js.js
-
just/twoThese.bat
-
just/well.txt