General
-
Target
Document_vIU8A4GAcj.zip
-
Size
4.5MB
-
MD5
1f47e6ba20c717642c9ffa13c4671453
-
SHA1
30c3db6b889d498815b35cf3ada232d974f89a00
-
SHA256
2c63e762ad58d8532531e374225649be5f1c85454ed50a67b4823797a9609d71
-
SHA512
4bea07d29eb54dc561bce7a7464c897b5a93ae00e7ee38575724f044a73bf4fef75fbd2f428291fd45c9b3324765e3152603fbb4701c6367537e665128235a9f
-
SSDEEP
98304:BrNgp0W1jFBV+qFvC83mOMHvdvEOfn7dW3U2XyBlRmKlLI16lXgg9d5mg:BxGJjhnvC83mOMV30kWw8uLI1E99dJ
Score
7/10
Malware Config
Signatures
-
Obfuscated with Agile.Net obfuscator 1 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
Files
-
Document_vIU8A4GAcj.zip
Password: 3452
-
Document.pdf.rar
Password: 3452
-
Document.pdf/About/AppCompat.admx
-
Document.pdf/About/AppXRuntime.admx
-
Document.pdf/About/AttachmentManager.admx
-
Document.pdf/About/AuditSettings.admx
-
Document.pdf/About/AutoPlay.admx
-
Document.pdf/About/Biometrics.admx
-
Document.pdf/About/Bits.admx
-
Document.pdf/About/CEIPEnable.admx
-
Document.pdf/About/COM.admx
-
Document.pdf/About/CipherSuiteOrder.admx
-
Document.pdf/About/Conf.admx
-
Document.pdf/About/ControlPanel.admx
-
Document.pdf/About/ControlPanelDisplay.admx
-
Document.pdf/About/Cpls.admx
-
Document.pdf/About/CredSsp.admx
-
Document.pdf/About/CredUI.admx
-
Document.pdf/About/CredentialProviders.admx
-
Document.pdf/About/CtrlAltDel.admx
-
Document.pdf/About/DCOM.admx
-
Document.pdf/About/DFS.admx
-
Document.pdf/About/DWM.admx
-
Document.pdf/About/Desktop.admx
-
Document.pdf/About/DeviceCompat.admx
-
Document.pdf/About/DeviceInstallation.admx
-
Document.pdf/About/DeviceSetup.admx
-
Document.pdf/About/DigitalLocker.admx
-
Document.pdf/About/DiskDiagnostic.admx
-
Document.pdf/About/DiskNVCache.admx
-
Document.pdf/About/DiskQuota.admx
-
Document.pdf/About/DistributedLinkTracking.admx
-
Document.pdf/About/DnsClient.admx
-
Document.pdf/About/EAIME.admx
-
Document.pdf/About/EarlyLaunchAM.admx
-
Document.pdf/About/EdgeUI.admx
-
Document.pdf/About/EncryptFilesonMove.admx
-
Document.pdf/About/ErrorReporting.admx
-
Document.pdf/About/EventForwarding.admx
-
Document.pdf/About/EventLog.admx
-
Document.pdf/About/EventViewer.admx
-
Document.pdf/About/Explorer.admx
-
Document.pdf/About/ExternalBoot.admx
-
Document.pdf/About/FileHistory.admx
-
Document.pdf/About/FileRecovery.admx
-
Document.pdf/About/FileRevocation.admx
-
Document.pdf/About/FileServerVSSProvider.admx
-
Document.pdf/About/FileSys.admx
-
Document.pdf/About/FolderRedirection.admx
-
Document.pdf/About/FramePanes.admx
-
Document.pdf/About/GameExplorer.admx
-
Document.pdf/About/Globalization.admx
-
Document.pdf/About/GroupPolicy-Server.admx
-
Document.pdf/About/GroupPolicy.admx
-
Document.pdf/About/GroupPolicyPreferences.admx
-
Document.pdf/About/Help.admx
-
Document.pdf/About/HelpAndSupport.admx
-
Document.pdf/About/ICM.admx
-
Document.pdf/About/IIS.admx
-
Document.pdf/About/InkWatson.admx
-
Document.pdf/About/Kerberos.admx
-
Document.pdf/About/LanmanServer.admx
-
Document.pdf/About/LeakDiagnostic.admx
-
Document.pdf/About/LinkLayerTopologyDiscovery.admx
-
Document.pdf/About/LocationProviderAdm.admx
-
Document.pdf/About/Logon.admx
-
Document.pdf/About/MMC.admx
-
Document.pdf/About/MMCSnapIns2.admx
-
Document.pdf/About/MMCSnapins.admx
-
Document.pdf/About/MSDT.admx
-
Document.pdf/About/MSI.admx
-
Document.pdf/About/MediaCenter.admx
-
Document.pdf/About/MobilePCMobilityCenter.admx
-
Document.pdf/About/MobilePCPresentationSettings.admx
-
Document.pdf/About/Msi-FileRecovery.admx
-
Document.pdf/About/NAPXPQec.admx
-
Document.pdf/About/NCSI.admx
-
Document.pdf/About/Netlogon.admx
-
Document.pdf/About/NetworkConnections.admx
-
Document.pdf/About/NetworkIsolation.admx
-
Document.pdf/About/NetworkProjection.admx
-
Document.pdf/About/OfflineFiles.admx
-
Document.pdf/About/P2P-pnrp.admx
-
Document.pdf/About/ParentalControls.admx
-
Document.pdf/About/PeerToPeerCaching.admx
-
Document.pdf/About/PenTraining.admx
-
Document.pdf/About/PerformanceDiagnostics.admx
-
Document.pdf/About/PerformancePerftrack.admx
-
Document.pdf/About/Power.admx
-
Document.pdf/About/PowerShellExecutionPolicy.admx
-
Document.pdf/About/PreviousVersions.admx
-
Document.pdf/About/Printing.admx
-
Document.pdf/About/Printing2.admx
-
Document.pdf/About/Programs.admx
-
Document.pdf/About/PswdSync.admx
-
Document.pdf/About/QOS.admx
-
Document.pdf/About/RPC.admx
-
Document.pdf/About/RacWmiProv.admx
-
Document.pdf/About/Radar.admx
-
Document.pdf/About/ReAgent.admx
-
Document.pdf/About/Reliability.admx
-
Document.pdf/About/RemoteAssistance.admx
-
Document.pdf/About/RemovableStorage.admx
-
Document.pdf/About/Scripts.admx
-
Document.pdf/About/Securitycenter.admx
-
Document.pdf/About/Sensors.admx
-
Document.pdf/About/ServerManager.admx
-
Document.pdf/About/Servicing.admx
-
Document.pdf/About/SettingSync.admx
-
Document.pdf/About/Setup.admx
-
Document.pdf/About/SharedFolders.admx
-
Document.pdf/About/Sharing.admx
-
Document.pdf/About/Shell-CommandPrompt-RegEditTools.admx
-
Document.pdf/About/ShellWelcomeCenter.admx
-
Document.pdf/About/Sidebar.admx
-
Document.pdf/About/SkyDrive.admx
-
Document.pdf/About/Smartcard.admx
-
Document.pdf/About/Snis.admx
-
Document.pdf/About/Snmp.admx
-
Document.pdf/About/SoundRec.admx
-
Document.pdf/About/StartMenu.admx
-
Document.pdf/About/SystemRestore.admx
-
Document.pdf/About/TPM.admx
-
Document.pdf/About/TabletPCInputPanel.admx
-
Document.pdf/About/TabletShell.admx
-
Document.pdf/About/TaskScheduler.admx
-
Document.pdf/About/Taskbar.admx
-
Document.pdf/About/TerminalServer-Server.admx
-
Document.pdf/About/TerminalServer.admx
-
Document.pdf/About/Thumbnails.admx
-
Document.pdf/About/TouchInput.admx
-
Document.pdf/About/UserProfiles.admx
-
Document.pdf/About/VolumeEncryption.admx
-
Document.pdf/About/W32Time.admx
-
Document.pdf/About/WCM.admx
-
Document.pdf/About/WDI.admx
-
Document.pdf/About/WPN.admx
-
Document.pdf/About/WinCal.admx
-
Document.pdf/About/WinInit.admx
-
Document.pdf/About/WinLogon.admx
-
Document.pdf/About/Windows.admx
-
Document.pdf/About/WindowsAnytimeUpgrade.admx
-
Document.pdf/About/WindowsBackup.admx
-
Document.pdf/About/WindowsColorSystem.admx
-
Document.pdf/About/WindowsConnectNow.admx
-
Document.pdf/About/WindowsDefender.admx
-
Document.pdf/About/WindowsExplorer.admx
-
Document.pdf/About/WindowsFileProtection.admx
-
Document.pdf/About/WindowsFirewall.admx
-
Document.pdf/About/WindowsMail.admx
-
Document.pdf/About/WindowsMediaDRM.admx
-
Document.pdf/About/WindowsMediaPlayer.admx
-
Document.pdf/About/WindowsMessenger.admx
-
Document.pdf/About/WindowsProducts.admx
-
Document.pdf/About/WindowsRemoteManagement.admx
-
Document.pdf/About/WindowsRemoteShell.admx
-
Document.pdf/About/WindowsServer.admx
-
Document.pdf/About/WindowsUpdate.admx
-
Document.pdf/About/Winsrv.admx
-
Document.pdf/About/WordWheel.admx
-
Document.pdf/About/WorkFolders-Client.admx
-
Document.pdf/About/WorkplaceJoin.admx
-
Document.pdf/About/en-US/ActiveXInstallService.adml
-
Document.pdf/About/en-US/AddRemovePrograms.adml
-
Document.pdf/About/en-US/AppCompat.adml
-
Document.pdf/About/en-US/AppXRuntime.adml
-
Document.pdf/About/en-US/AppxPackageManager.adml
-
Document.pdf/About/en-US/AttachmentManager.adml
-
Document.pdf/About/en-US/AuditSettings.adml
-
Document.pdf/About/en-US/AutoPlay.adml
-
Document.pdf/About/en-US/Biometrics.adml
-
Document.pdf/About/en-US/Bits.adml
-
Document.pdf/About/en-US/CEIPEnable.adml
-
Document.pdf/About/en-US/COM.adml
-
Document.pdf/About/en-US/CipherSuiteOrder.adml
-
Document.pdf/About/en-US/Conf.adml
-
Document.pdf/About/en-US/ControlPanel.adml
-
Document.pdf/About/en-US/ControlPanelDisplay.adml
-
Document.pdf/About/en-US/Cpls.adml
-
Document.pdf/About/en-US/CredSsp.adml
-
Document.pdf/About/en-US/CredUI.adml
-
Document.pdf/About/en-US/CredentialProviders.adml
-
Document.pdf/About/en-US/CtrlAltDel.adml
-
Document.pdf/About/en-US/DCOM.adml
-
Document.pdf/About/en-US/DFS.adml
-
Document.pdf/About/en-US/DWM.adml
-
Document.pdf/About/en-US/Desktop.adml
-
Document.pdf/About/en-US/DeviceCompat.adml
-
Document.pdf/About/en-US/DeviceInstallation.adml
-
Document.pdf/About/en-US/DeviceSetup.adml
-
Document.pdf/About/en-US/DigitalLocker.adml
-
Document.pdf/About/en-US/DiskDiagnostic.adml
-
Document.pdf/About/en-US/DiskNVCache.adml
-
Document.pdf/About/en-US/DiskQuota.adml
-
Document.pdf/About/en-US/DistributedLinkTracking.adml
-
Document.pdf/About/en-US/DnsClient.adml
-
Document.pdf/About/en-US/EAIME.adml
-
Document.pdf/About/en-US/EarlyLaunchAM.adml
-
Document.pdf/About/en-US/EdgeUI.adml
-
Document.pdf/About/en-US/EncryptFilesonMove.adml
-
Document.pdf/About/en-US/ErrorReporting.adml
-
Document.pdf/About/en-US/EventForwarding.adml
-
Document.pdf/About/en-US/EventLog.adml
-
Document.pdf/About/en-US/EventViewer.adml
-
Document.pdf/About/en-US/Explorer.adml
-
Document.pdf/About/en-US/ExternalBoot.adml
-
Document.pdf/About/en-US/FileHistory.adml
-
Document.pdf/About/en-US/FileRecovery.adml
-
Document.pdf/About/en-US/FileRevocation.adml
-
Document.pdf/About/en-US/FileServerVSSProvider.adml
-
Document.pdf/About/en-US/FileSys.adml
-
Document.pdf/About/en-US/FolderRedirection.adml
-
Document.pdf/About/en-US/FramePanes.adml
-
Document.pdf/About/en-US/GameExplorer.adml
-
Document.pdf/About/en-US/Globalization.adml
-
Document.pdf/About/en-US/GroupPolicy-Server.adml
-
Document.pdf/About/en-US/GroupPolicy.adml
-
Document.pdf/About/en-US/GroupPolicyPreferences.adml
-
Document.pdf/About/en-US/Help.adml
-
Document.pdf/About/en-US/HelpAndSupport.adml
-
Document.pdf/About/en-US/ICM.adml
-
Document.pdf/About/en-US/IIS.adml
-
Document.pdf/About/en-US/InetRes.adml
-
Document.pdf/About/en-US/InkWatson.adml
-
Document.pdf/About/en-US/KDC.adml
-
Document.pdf/About/en-US/Kerberos.adml
-
Document.pdf/About/en-US/LanmanServer.adml
-
Document.pdf/About/en-US/LeakDiagnostic.adml
-
Document.pdf/About/en-US/LinkLayerTopologyDiscovery.adml
-
Document.pdf/About/en-US/LocationProviderAdm.adml
-
Document.pdf/About/en-US/Logon.adml
-
Document.pdf/About/en-US/MMC.adml
-
Document.pdf/About/en-US/MMCSnapIns2.adml
-
Document.pdf/About/en-US/MMCSnapins.adml
-
Document.pdf/About/en-US/MSDT.adml
-
Document.pdf/About/en-US/MSI.adml
-
Document.pdf/About/en-US/MediaCenter.adml
-
Document.pdf/About/en-US/MobilePCMobilityCenter.adml
-
Document.pdf/About/en-US/MobilePCPresentationSettings.adml
-
Document.pdf/About/en-US/Msi-FileRecovery.adml
-
Document.pdf/About/en-US/NAPXPQec.adml
-
Document.pdf/About/en-US/NCSI.adml
-
Document.pdf/About/en-US/Netlogon.adml
-
Document.pdf/About/en-US/NetworkConnections.adml
-
Document.pdf/About/en-US/NetworkIsolation.adml
-
Document.pdf/About/en-US/NetworkProjection.adml
-
Document.pdf/About/en-US/OfflineFiles.adml
-
Document.pdf/About/en-US/P2P-pnrp.adml
-
Document.pdf/About/en-US/ParentalControls.adml
-
Document.pdf/About/en-US/PeerToPeerCaching.adml
-
Document.pdf/About/en-US/PenTraining.adml
-
Document.pdf/About/en-US/PerformanceDiagnostics.adml
-
Document.pdf/About/en-US/PerformancePerftrack.adml
-
Document.pdf/About/en-US/Power.adml
-
Document.pdf/About/en-US/PowerShellExecutionPolicy.adml
-
Document.pdf/About/en-US/PreviousVersions.adml
-
Document.pdf/About/en-US/Printing.adml
-
Document.pdf/About/en-US/Printing2.adml
-
Document.pdf/About/en-US/Programs.adml
-
Document.pdf/About/en-US/PswdSync.adml
-
Document.pdf/About/en-US/QOS.adml
-
Document.pdf/About/en-US/RPC.adml
-
Document.pdf/About/en-US/RacWmiProv.adml
-
Document.pdf/About/en-US/Radar.adml
-
Document.pdf/About/en-US/ReAgent.adml
-
Document.pdf/About/en-US/Reliability.adml
-
Document.pdf/About/en-US/RemoteAssistance.adml
-
Document.pdf/About/en-US/RemovableStorage.adml
-
Document.pdf/About/en-US/Scripts.adml
-
Document.pdf/About/en-US/Securitycenter.adml
-
Document.pdf/About/en-US/Sensors.adml
-
Document.pdf/About/en-US/ServerManager.adml
-
Document.pdf/About/en-US/Servicing.adml
-
Document.pdf/About/en-US/SettingSync.adml
-
Document.pdf/About/en-US/Setup.adml
-
Document.pdf/About/en-US/SharedFolders.adml
-
Document.pdf/About/en-US/Sharing.adml
-
Document.pdf/About/en-US/Shell-CommandPrompt-RegEditTools.adml
-
Document.pdf/About/en-US/ShellWelcomeCenter.adml
-
Document.pdf/About/en-US/Sidebar.adml
-
Document.pdf/About/en-US/SkyDrive.adml
-
Document.pdf/About/en-US/Smartcard.adml
-
Document.pdf/About/en-US/Snis.adml
-
Document.pdf/About/en-US/Snmp.adml
-
Document.pdf/About/en-US/SoundRec.adml
-
Document.pdf/About/en-US/StartMenu.adml
-
Document.pdf/About/en-US/SystemRestore.adml
-
Document.pdf/About/en-US/TPM.adml
-
Document.pdf/About/en-US/TabletPCInputPanel.adml
-
Document.pdf/About/en-US/TabletShell.adml
-
Document.pdf/About/en-US/TaskScheduler.adml
-
Document.pdf/About/en-US/Taskbar.adml
-
Document.pdf/About/en-US/TerminalServer-Server.adml
-
Document.pdf/About/en-US/TerminalServer.adml
-
Document.pdf/About/en-US/Thumbnails.adml
-
Document.pdf/About/en-US/TouchInput.adml
-
Document.pdf/About/en-US/UserProfiles.adml
-
Document.pdf/About/en-US/VolumeEncryption.adml
-
Document.pdf/About/en-US/W32Time.adml
-
Document.pdf/About/en-US/WCM.adml
-
Document.pdf/About/en-US/WDI.adml
-
Document.pdf/About/en-US/WPN.adml
-
Document.pdf/About/en-US/WinCal.adml
-
Document.pdf/About/en-US/WinInit.adml
-
Document.pdf/About/en-US/WinLogon.adml
-
Document.pdf/About/en-US/Windows.adml
-
Document.pdf/About/en-US/WindowsAnytimeUpgrade.adml
-
Document.pdf/About/en-US/WindowsBackup.adml
-
Document.pdf/About/en-US/WindowsColorSystem.adml
-
Document.pdf/About/en-US/WindowsConnectNow.adml
-
Document.pdf/About/en-US/WindowsDefender.adml
-
Document.pdf/About/en-US/WindowsExplorer.adml
-
Document.pdf/About/en-US/WindowsFileProtection.adml
-
Document.pdf/About/en-US/WindowsFirewall.adml
-
Document.pdf/About/en-US/WindowsMail.adml
-
Document.pdf/About/en-US/WindowsMediaDRM.adml
-
Document.pdf/About/en-US/WindowsMediaPlayer.adml
-
Document.pdf/About/en-US/WindowsMessenger.adml
-
Document.pdf/About/en-US/WindowsProducts.adml
-
Document.pdf/About/en-US/WindowsRemoteManagement.adml
-
Document.pdf/About/en-US/WindowsRemoteShell.adml
-
Document.pdf/About/en-US/WindowsServer.adml
-
Document.pdf/About/en-US/WindowsUpdate.adml
-
Document.pdf/About/en-US/Winsrv.adml
-
Document.pdf/About/en-US/WordWheel.adml
-
Document.pdf/About/en-US/WorkFolders-Client.adml
-
Document.pdf/About/en-US/WorkplaceJoin.adml
-
Document.pdf/About/en-US/fthsvc.adml
-
Document.pdf/About/en-US/hotspotauth.adml
-
Document.pdf/About/en-US/iSCSI.adml
-
Document.pdf/About/en-US/msched.adml
-
Document.pdf/About/en-US/nca.adml
-
Document.pdf/About/en-US/pca.adml
-
Document.pdf/About/en-US/sdiageng.adml
-
Document.pdf/About/en-US/srm-fci.adml
-
Document.pdf/About/en-US/tcpip.adml
-
Document.pdf/About/en-US/wlansvc.adml
-
Document.pdf/About/en-US/wwansvc.adml
-
Document.pdf/About/fthsvc.admx
-
Document.pdf/About/hotspotauth.admx
-
Document.pdf/About/iSCSI.admx
-
Document.pdf/About/inetres.admx
-
Document.pdf/About/kdc.admx
-
Document.pdf/About/msched.admx
-
Document.pdf/About/nca.admx
-
Document.pdf/About/pca.admx
-
Document.pdf/About/sdiageng.admx
-
Document.pdf/About/srm-fci.admx
-
Document.pdf/About/tcpip.admx
-
Document.pdf/About/wlansvc.admx
-
Document.pdf/About/wwansvc.admx
-
Document.pdf/Document.pdf.scr
Password: 3452
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
password.txt