Behavioral task
behavioral1
Sample
Device/HarddiskVolume2/Program Files (x86)/StayLinked Desktop Client/StayLinked.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Device/HarddiskVolume2/Program Files (x86)/StayLinked Desktop Client/StayLinked.exe
Resource
win10v2004-20220812-en
General
-
Target
Office5_2022-09-25_16_36_34.zip
-
Size
526KB
-
MD5
17560de71556fd22dfd67af5cb1856f2
-
SHA1
84dca6060fa511d4c86853dddda794c4b9b4ff4d
-
SHA256
a75e46ef54e77f1253f0011c9b52449a8f74df77fab6fc9c63605d7ddce0b48a
-
SHA512
d4955e735d76a23b9ada04b9fc89e2e05633a11d381ebd41f873b0c2d268b876159e46a2a5596a0ecd0a7f4566671be85532cc5eb4f9e6e6cbfb47fec94d0ba8
-
SSDEEP
12288:/fpGT3SlE+UcZBNvQmhMcvRtvR5uLIT3OEMTkGAihrwDrL/jvfaj:XpQirZ4cvRtvXu43OPkGA1zTij
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Device/HarddiskVolume2/Program Files (x86)/StayLinked Desktop Client/StayLinked.exe upx
Files
-
Office5_2022-09-25_16_36_34.zip.zip
Password: Wt=phL0i;5J#gTUi{7GC
-
Device/HarddiskVolume2/Program Files (x86)/StayLinked Desktop Client/StayLinked.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
manifest.json