Static task
static1
Behavioral task
behavioral1
Sample
Contract.lnk
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Contract.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
publish/decoyUnexasperated.cmd
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
publish/decoyUnexasperated.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
publish/overarmNonessential.vbs
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
publish/overarmNonessential.vbs
Resource
win10v2004-20220812-en
General
-
Target
Contract#9691.iso
-
Size
1.3MB
-
MD5
05bc92a3ce099b4d9fe328cc87df3b28
-
SHA1
ebb660756816eae68265c9d9d7bbad1dd4c29a7f
-
SHA256
2438fa4c2cf5aae154ea8809453109a8924ee8d555c5f4a6cce080787afce30c
-
SHA512
396821ea954b3036a4fcee6c6606ccc969db1cce05e9c0cbd944326c4294038938c45c6eb62cced21d556ec184d315d072d5404643414d8576addf79f2dc12ef
-
SSDEEP
24576:SwFOHrwcwjHmvwiK7Jb0y/cT5SL6uj3HHGHx8sd9MsdcaJm0o1bPy+SsF:SwFOHrwcwjHmvwiKb1/cT5Sb3HHQ1dd8
Malware Config
Signatures
Files
-
Contract#9691.iso.iso
-
Contract.lnk.lnk
-
publish/decoyUnexasperated.cmd
-
publish/depredating.txt
-
publish/grandparents.txt
-
publish/overarmNonessential.vbs.vbs
-
publish/purge.jpg.jpg
-
publish/thrusters.txt
-
publish/xxviii.dat.dll .ps1 regsvr32 windows x86