Static task
static1
Behavioral task
behavioral1
Sample
naročilo.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
naročilo.exe
Resource
win10v2004-20220812-en
General
-
Target
2984a7f69785a08888238d4653b76732
-
Size
1.2MB
-
MD5
2984a7f69785a08888238d4653b76732
-
SHA1
6c7d9d77d8e376d29472484daaf7f1d879d2f8a4
-
SHA256
7f60a602a758d8ad4a077a16c5b8272b39c05f37dc4b7b6dec22a5f19cba9e28
-
SHA512
3a937cf527a6dd54c69f48e37fcb11928828651bd27581abdba03d3dc2dd0fa85a41f71bfaf56543328b34beb20063da8371204c7b6759c6be62a1be09147546
-
SSDEEP
24576:nvGUeFVJgKaGIZlwoCopQJ3L8MBiYa8kUzixACh4:nv465HwoCMhHxN+
Malware Config
Signatures
Files
-
2984a7f69785a08888238d4653b76732.eml
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=1786cfd53a3926fe8612684f4ae289ef2818f34983e495ef7fcd358145d39142&u=
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=095dfc870fce1c351d8beb8be686e6932fe7e8c47eee42f6244cb6bfc6f6172e&u=
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=fc034ae6312f930c93db6fb435993d27a704e5e3cbcc12767cefba3e0fd64cba&u=
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=c64acf7a8c03c5db78de3e1d5901671b787e0ba2a18ce519f4a1306ab9da153a&u=
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=8abf2ce4db8b03b9f5efd20b49ae1dce3ecce6cd7de23656d29f8167a8d81152&u=
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=55f5c17b792efe9e349597a8cfff38e0af666f3213a424f7a4a22867210dbb9a&u=
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=47ea1cfb94e2c8657c487a80d22f0dad6b5c66b2a2cbdfee9326bfd0003fe14f&u=
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=1786cfd53a3926fe8612684f4ae289ef2818f34983e495ef7fcd358145d39142&u=http%3A%2F%2Fwww.pnv.si%2F
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=095dfc870fce1c351d8beb8be686e6932fe7e8c47eee42f6244cb6bfc6f6172e&u=https%3A%2F%2Fwww.facebook.com%2Fprodukcija.novih.vizij
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=fc034ae6312f930c93db6fb435993d27a704e5e3cbcc12767cefba3e0fd64cba&u=https%3A%2F%2Fwww.youtube.com%2Fchannel%2FUCkdUryEs24F7EEbdoH0jxqQ
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=c64acf7a8c03c5db78de3e1d5901671b787e0ba2a18ce519f4a1306ab9da153a&u=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fpnvprodukcijanovihvizij
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=8abf2ce4db8b03b9f5efd20b49ae1dce3ecce6cd7de23656d29f8167a8d81152&u=https%3A%2F%2Fwww.instagram.com%2Fpnvprodukcija%2F
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=55f5c17b792efe9e349597a8cfff38e0af666f3213a424f7a4a22867210dbb9a&u=https%3A%2F%2Fwww.pinterest.com%2Fpnvteam%2F
-
https://antiphishing.vadesecure.com/v4?f=ZmttOUJBaHM0cVJhc0pLb6gVDOS-RA6eKtgm2wCK2zXteeR6DYa3GHLDnAcQg5-y&i=SXhidDdiNE5weDlFTk1JSPH6NFrl-nbB8CeNqYtbymY&k=AKCY&r=MDl4M3AxU2RhSHpiVVJtMDGcLfZeIlMgZybZ_3x6kvzL0vmhnBG16-aRbwK1pOaj&s=a8b359b6dea9820142f222ca710a07c25c2e2ba244b5d23b196bc70d9cec51d2&u=https%3A%2F%2Faaa.bisnode.si%2Fcertificate%2F%3FcompanyID%3DSI1000006723870%26year%3D2021%26lang%3Dsl-SI
- Show all
-
-
email-html-2.txt.html
-
email-plain-1.txt
-
image001.png.png
-
image002.png.png
-
image003.png.png
-
image004.png.png
-
image005.png.png
-
image006.png.png
-
image007.png.png
-
naročilo.r09.rar
-
naročilo.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ