Static task
static1
Behavioral task
behavioral1
Sample
Invoi_PDF.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Invoi_PDF.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
ricocheted/potionClassy.cmd
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
ricocheted/potionClassy.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
ricocheted/superciliouslyJove.js
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
ricocheted/superciliouslyJove.js
Resource
win10v2004-20220812-en
General
-
Target
Invoi_PDF#9628.iso
-
Size
510KB
-
MD5
0420c4202e6c2ab91848d079c90bea22
-
SHA1
51abf2b20e024315a385c476b161e893a365e95c
-
SHA256
5c2a3242549d54361ad1ae9ea35e2b831c284a3befc555b92e3109f0bea45783
-
SHA512
014f01d9520762acbc257b47d7f8b7ed7bfd28c29a5e51a060d443085b1abd4c2d977aa0b490bc7dfcebd34e13f7e9a2d8c7c54941242fdd5f65aa77b842a20d
-
SSDEEP
6144:+aMG1Lt/6HdvqSwNOTzZLen7qACQ9j6pSHP7csiU302dw9qObEJ2:8ALgPLQHP7AX2djObp
Malware Config
Signatures
Files
-
Invoi_PDF#9628.iso.iso
-
Invoi_PDF.lnk.lnk
-
ricocheted/falsehood.txt
-
ricocheted/potionClassy.cmd
-
ricocheted/superciliouslyJove.js.js
-
ricocheted/trailers.db.dll .js windows x64
-
ricocheted/wager.jpg.jpg