Static task
static1
Behavioral task
behavioral1
Sample
lZSrXwYDDkbZYDN.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
lZSrXwYDDkbZYDN.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
f2d7275a6557c9fa6501794d6f12155813e1ffc672f65f349d3b404952b4701f.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
f2d7275a6557c9fa6501794d6f12155813e1ffc672f65f349d3b404952b4701f.exe
Resource
win10v2004-20220812-en
General
-
Target
8030816201.zip
-
Size
1.5MB
-
MD5
20042bf2ef41f7e46715c00aa86fd651
-
SHA1
3de849099762ae40c02e93ef860b92178430481e
-
SHA256
a1ec760dbe6e44ec5a070d8e967cf25fb54ef1981a6f2f3cb2cb4f861e0ac461
-
SHA512
4fdd76022919e4e797dbc13ef932bf3969afb010139118fea7a3f46be6ccf0397b2170806fe3176dcb7c16756d12989c8a11023005753a8c545e02a80574b5b2
-
SSDEEP
49152:LnkdVLpAWHXuxJIepi0FHcPtr74Mmth/4Lt:Lnk/bCsEcpCwh
Malware Config
Signatures
Files
-
8030816201.zip.zip
Password: infected
-
c4064715f49c19c5b1006837ed685971c0bca59a9e71e51e4346e5c794e612bf.zip
-
lZSrXwYDDkbZYDN.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1000KB - Virtual size: 1000KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
f2d7275a6557c9fa6501794d6f12155813e1ffc672f65f349d3b404952b4701f.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1000KB - Virtual size: 1000KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ