Overview

overview

10

Static

static

Postcards.lnk

windows7-x64

3

Postcards.lnk

windows10-2004-x64

3

plaid/handouts.dll

windows7-x64

10

plaid/handouts.dll

windows10-2004-x64

10

plaid/quic...ly.cmd

windows7-x64

1

plaid/quic...ly.cmd

windows10-2004-x64

1

plaid/unfa...olo.js

windows7-x64

3

plaid/unfa...olo.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Postcard#6343.iso

  • Size

    654KB

  • MD5

    711578e9d082b1f2fa448c9188df492f

  • SHA1

    c921d10184a03f93984eb77fb13ecf6d08e3f3cd

  • SHA256

    1a7a641b9289ae0d1b6fe055f9a3b40c8b7f5c9b83dc317e86791ee3250da3ec

  • SHA512

    30119ea730fc1c6c54070b5087c7cd079d2125ca472669614e4d2a195b5cafeb78ae22b828fcdad9b70480fba0a5a2f51b4db98a181498b96150d5ed3c0578f3

  • SSDEEP

    12288:ycmIE2Ns6LjjAw5cwimXujHxiVNYKKn8cxFOBOYHHbwBOcIOrDgHHH:nmJl6mHi/EnR8HHbwhDgHHH

Score
N/A

Malware Config

Signatures

Files

  • Postcard#6343.iso
    .iso
  • Postcards.lnk
    .lnk
  • plaid/dishonors.gif
  • plaid/firs.jpg
    .jpg
  • plaid/handouts.db
    .dll regsvr32 windows x86

    5258e65ea568c264cf3e536d81339bf5


    Headers

    Imports

    Exports

    Sections

  • plaid/jesuits.png
    .png
  • plaid/quickensFairly.cmd
  • plaid/reserved.txt
  • plaid/unfastenerPolo.js
    .js