Static task
static1
Behavioral task
behavioral1
Sample
Invoi_PDF.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Invoi_PDF.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
cadets/drenchingStances.cmd
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
cadets/drenchingStances.cmd
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
cadets/guessesFritters.js
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
cadets/guessesFritters.js
Resource
win10v2004-20220812-en
General
-
Target
file.7z.zip
-
Size
235KB
-
MD5
e2e6e1aef2c4bb02d42011d16433eefa
-
SHA1
0042b8f9defba052a13785bd410cef2d818363b8
-
SHA256
6d97324f678c7159ca6651d7b37b410083a7c20dc7345e7b91dcf33953a27e12
-
SHA512
b4cd30f7ac21790c09cd61df71d8f18f70791e78d3b7fb5b74f9490ccdd3cb6e6c674d793ba7ba4604548fa4c0afc883196a9242c1769bbbc4317462b7ba074e
-
SSDEEP
6144:fTO7zIAxp7q6vNWp0SeJilfl5fN6oywwUrrsC/R+6qu:fTOPt7BvNWpG6l5fNJ5rsn6qu
Malware Config
Signatures
Files
-
file.7z.zip.zip
Password: infected
-
file.7z.7z
Password: infected
-
Invoi_PDF#3642.iso.iso .js
Password: infected
-
Invoi_PDF.lnk.lnk
-
cadets/drenchingStances.cmd
-
cadets/guessesFritters.js.js
-
cadets/hypocritical.db.dll .js windows x64
Password: infected
-
cadets/inclines.txt
-
cadets/located.png.png
-
cadets/obtaining.txt
-
cadets/oiliness.txt
-
cadets/perpendicularly.txt
-
cadets/placeable.png.png
-
cadets/suggested.png.png
-
cadets/teensy.txt