Contract#6067.iso
- SHA256 5578fbc2b70fb9c4a49bfb8b7b6fbe945febee193699fcc9c2aa46675d86f778
Overview
overview
10Static
static
Contract.lnk
windows7-x64
3Contract.lnk
windows10-2004-x64
3publish/ir...ss.cmd
windows7-x64
1publish/ir...ss.cmd
windows10-2004-x64
1publish/pebbles.dll
windows7-x64
10publish/pebbles.dll
windows10-2004-x64
10publish/pe...sh.vbs
windows7-x64
3publish/pe...sh.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Contract.lnk
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Contract.lnk
Resource
win10v2004-20220901-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
publish/irritationTemperateness.cmd
Resource
win7-20220901-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
publish/irritationTemperateness.cmd
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
publish/pebbles.dll
Resource
win7-20220812-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
publish/pebbles.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
publish/perfunctorinessRehash.vbs
Resource
win7-20220901-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
publish/perfunctorinessRehash.vbs
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target Contract#6067.iso
- Size 1.1MB
- Sample221003-snfnbscde3
- SHA256 5578fbc2b70fb9c4a49bfb8b7b6fbe945febee193699fcc9c2aa46675d86f778
- MD5 6bc854cbed6886d1f9f805c60f1c3778
- SHA1 fe875e37e98df087296d27a03428345035998696
- SHA512 5b7e49360f5d6f472f1755a28a83ab4016f3918d967cb142b9b5a3b813929a43084059c908f76d94590afc22b1cd845cd7d13697b8b6a23600aafb8ee2f5b229
- SSDEEP 24576:OwFOHrwcwjHmvwiK7Jb0y/cT5SLz5EVl5DC4HDbdnuj3HH:OwFOHrwcwjHmvwiKb1/cT5SZEVjVbdy3
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
Contract#6067.iso.iso 1.1MB
-
Contract.lnk.lnk 1KB
-
publish/depredating.txt173KB
-
publish/grandparents.txt250KB
-
publish/irritationTemperateness.cmd61B
-
publish/pebbles.dat.dll 481KB
-
publish/perfunctorinessRehash.vbs.vbs 237B
-
publish/purge.jpg.jpg 34KB
-
publish/thrusters.txt122KB
Contract.lnk
- SHA256 6ec0ba7e0db0e097c729bf9cf80b270f0d8f7e7314cec7bf30b8c644f866e584
- MD5 c86d26c6773f581a96cc5198ee12830e
- SHA1 d85174dda21f5ef8f92efdd35d2a13c426e1768e
- SHA512 e27d1f610673888d881b422695356678775d3673f937e2e897525319f6ff2751382d75a3c89e58ab71ebc45e586c357b8e2e832e9d4cd288638e4e83d4ebcc74
- MD5 SHA1 SHA512
publish/depredating.txt
- SHA256 bdfb4cdb6191e3cf7214c077dee595b42372a6d1d36001d1427ded9e38b86973
- MD5 ef9b0c9024a61d59a0c5bbd34d298416
- SHA1 8015e21771fb1059e27159e9dd6bcd822abbd2f1
- SHA512 b6123abc346fc85db251a9a29531ef21c17a3f06f4581eb76cdd78cfd533305e507264e79a6d77989f550d88b706138027ed4e486ed100d58862d983d8bf29d7
- SSDEEP 3072:9DPTSuynw/tnFTojltQ3OHBBwOIDVn5TOwTT1ZOXBnj/tQ7Hk1ZOipDCj/tQJ1Zw:9DPTSuynwlFTgO3OHrwOIDV5TOw1qTOp
- MD5 SHA1 SHA512 SSDEEP
publish/grandparents.txt
- SHA256 9fe812c674791b472e17f062c9f94200d558fc6fc85f851cce0e06b4eecf3eef
- MD5 045925086490cb719cecc322e1b05603
- SHA1 1901227c0b943daafb8b088aba84e277f74b1a6e
- SHA512 0f362979c7015b400e1e1a02be3fbb79117f36c6c5db0472894d4626f987c628cb8fb721946d9937a0b66d737f8d67b1ab2abc5b2b7b05f77c7cb18e8a0a08aa
- SSDEEP 6144:+b46oEgjlDXWtZpJ+lD6UW0bmpqOWDTiqTP/cBL+RlDq7EKB4bbxbMbGuXplDDzK:mK7Jb0y/cT5SLL
- MD5 SHA1 SHA512 SSDEEP
publish/irritationTemperateness.cmd
- SHA256 ec9bed0d3bd243ae4db1d4c27642a363fa4f98dd13017f230cce0fb7324ed24b
- MD5 5392444aa205e2fadda8b3c3daddb2ac
- SHA1 aab7ed18ccd307c39eace15280d3a24be094848d
- SHA512 16ceda76610ac604d72be826a0e26622b41ff9c8acc50ec1b4fc5a0d3749d69c7cbab1c07a5dfa39ad4f063a3bd3f4ac1b236718afda28abd55988e50ad4e7e9
- MD5 SHA1 SHA512
publish/pebbles.dat
- IMPHASH 8877a7b766af3aace7fcad8462a174cc
- SHA256 1965dc57456d4fc01b6ce0f242d80776fe08a16354e6177255cba618348355ac
- MD5 d89521adaf6418e6ebe43b1a1a9d2af9
- SHA1 38cac8495ef43e51cdac1cb5e85d10137b365bee
- SHA512 703db1e11372070dbbabc8a96c8600f079273e4dfad4e5437a5fd4b046187cf9f24b47ad68fadaf3bcf7fb1dcad8ecf98edd299281938eb144c4c6c29d68461f
- SSDEEP 12288:Y2X+B4HKFVxT5jXAcOf35HI9H5RGqdIhr54f:L5EVl5DC4HDbd
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
230105
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
Sleep
DebugBreak
GetCurrentProcess
lstrlenA
GetCurrentThreadId
lstrcmpA
VirtualAlloc
GetVersion
GetCommandLineA
GetFileAttributesA
GetCurrentThread
GetCurrentProcessId
GetModuleHandleW
lstrcmpiA
CreateFileW
CloseHandle
GetModuleHandleA
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
HeapSize
SetStdHandle
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
GetStdHandle
GetFileType
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
MoveFileExW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetFilePointerEx
WriteConsoleW
advapi32
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
shlwapi
PathFindExtensionA
PathFindOnPathA
PathFileExistsA
ord155
PathFindSuffixArrayA
StrToIntA
DllRegisterServer
DllUnregisterServer
bewailable
courtlet
noncensored
rhizocarpean
stine
strigiles
targetlike
trimethoxy
Name
.data
Size
344KB
Virtual Size
344KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc6s
Size
104KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
CODE
Size
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.hata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
DATA
Size
512B
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
publish/perfunctorinessRehash.vbs
- SHA256 c84838381dfad99dc6e26f0e413a38611feea4e8530abcee1b4260b82076551d
- MD5 f0d4ad5f3317320f8b85d38062a79008
- SHA1 0d5a8b8067f68a9cd986502b1448dc040527089e
- SHA512 934f7a16fb10ae8d57a275ccf12777b8e51cdbf402b3e4a51772ca810de7a442bdc5de6fcc768f04e928e78c78c987a270a26249879a728ff5b59d7f1884693d
- MD5 SHA1 SHA512
publish/purge.jpg
- SHA256 a11b700babdc7b22bdaa833790716b432e82c9e196aaaab344bd6d4efeb7e94c
- MD5 0b9167d578ddd702bb820640ed0f1a95
- SHA1 b28a5231f70533c8854cf53093266f1c117f19ef
- SHA512 dd172a46d0542538f527d0c9b5a52c87d6a8fc98e7c0ef2be339a23b26710951b9af0db5a9c02292d097466d30592b811c42a117872c55726a05227bba5a56c3
- SSDEEP 768:LdHoIEdywrAXX9ZDOjE3PaA2Lpkw81rUAzcJ56:xIIEQwMXXbDEEfb2LpkLW8
- MD5 SHA1 SHA512 SSDEEP
publish/thrusters.txt
- SHA256 6384ac1ca3aa1e5b0135231e362af6f34b1a3b82b1282268d0d9241a20a5d9e5
- MD5 a754896e91e5bb19211368939ea012b4
- SHA1 1e191073a28ea2301791e70e05de2c7c966710b9
- SHA512 908d36d804d4ec6d511f9fa24ea281f179aeceb1e611dc2eba70ad13103af22d055e560ee22112dd963d419f4b02aeb72ee0945968ee8a373e44d7da16543dba
- SSDEEP 3072:Fj/tQD/pjNj/QHHr1ZOPj/tQBQaM5KZOHj/tQN/1ZOcBSV1ZOb:ZOfQHHJeOaaaKKOT3SvG
- MD5 SHA1 SHA512 SSDEEP