Behavioral task
behavioral1
Sample
c884f80accda415c39632e495f11e1d143649d0439d6eecd8a9d4851d041c444.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c884f80accda415c39632e495f11e1d143649d0439d6eecd8a9d4851d041c444.dll
Resource
win10v2004-20220901-en
General
-
Target
6-7626916155.zip
-
Size
484KB
-
MD5
81edbe2474580d09e957023210f3309d
-
SHA1
b8132429ca3785981b8176d42ec39dc06f015e0a
-
SHA256
457e805a85c252d187b716cb6a1167164d18c26a7535d37cb4ec4387d6c6aafc
-
SHA512
0ae0c269abe5f55a3ce40c4c295cf92d084a66c7b168120fbda1a2bf8c908e60411340011e54747c5cce18fe85961e2780959e5944339d7368434aa246dcc350
-
SSDEEP
12288:Pd0uIBDRN5PAICplNzWm1Jg3HgsIRA9lsZa/IzztDW:eD3Fs7MyRA9lJ/IXo
Malware Config
Extracted
jupyter
http://146.70.71.174
Signatures
-
Jupyter family
Files
-
6-7626916155.zip.zip
Password: infected
-
c884f80accda415c39632e495f11e1d143649d0439d6eecd8a9d4851d041c444.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 366KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 345KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ