Overview
overview
10Static
static
invoice.lnk
windows7-x64
3invoice.lnk
windows10-2004-x64
3just/atMe.bat
windows7-x64
1just/atMe.bat
windows10-2004-x64
1just/justThat.js
windows7-x64
3just/justThat.js
windows10-2004-x64
1just/not.txt
windows7-x64
1just/not.txt
windows10-2004-x64
1just/thisWant.dll
windows7-x64
10just/thisWant.dll
windows10-2004-x64
10just/well.txt
windows7-x64
1just/well.txt
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
invoice.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
invoice.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
just/atMe.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
just/atMe.bat
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
just/justThat.js
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
just/justThat.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
just/not.txt
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
just/not.txt
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
just/thisWant.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
just/thisWant.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
just/well.txt
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
just/well.txt
Resource
win10v2004-20220901-en
General
-
Target
invoice(91522)#919633.zip
-
Size
200KB
-
MD5
bdb3dcfd165451a8b390cc20f6e7fd15
-
SHA1
ed86c992fcc941d0204a3d6aa1f08e77573dc200
-
SHA256
708eb5a1c82a6d7fd838e5af412d228671f801671ed3fcdc7c59f0c63e179ea9
-
SHA512
674f9542955f45c159a17f4a3c3d418b99f22f5bd7df0990d13bf221cf3cd18f8f71eda86c119391464453d550735befb5436978bee981b97330f8b2813791fb
-
SSDEEP
6144:IshvS5JuFiYLp1d8u4LUISbilq5duLdpy:nSn99uPTl0dk
Malware Config
Signatures
Files
-
invoice(91522)#919633.zip.zip
Password: invoice0915
-
invoice#393456.iso.iso .js
Password: invoice0915
-
invoice.lnk.lnk
-
just/atMe.bat
-
just/justThat.js.js
-
just/not.txt
-
just/thisWant.db.dll .js windows x64
Password: invoice0915
-
just/well.txt