Overview
overview
1Static
static
�...nt.dll
windows7-x64
1�...nt.dll
windows10-2004-x64
1�...bug.js
windows7-x64
1�...bug.js
windows10-2004-x64
1�...tes.js
windows7-x64
1�...tes.js
windows10-2004-x64
1�...map.js
windows7-x64
1�...map.js
windows10-2004-x64
1�...r.html
windows7-x64
1�...r.html
windows10-2004-x64
1�...yer.js
windows7-x64
1�...yer.js
windows10-2004-x64
1�...t.html
windows7-x64
1�...t.html
windows10-2004-x64
1�...el.dll
windows7-x64
1�...el.dll
windows10-2004-x64
1�...rm.dll
windows7-x64
1�...rm.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ļ/Client.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ļ/Client.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
ļ/DefaultSettings/Prototype_Files/plugins/debug/debug.js
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
ļ/DefaultSettings/Prototype_Files/plugins/debug/debug.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
ļ/DefaultSettings/Prototype_Files/plugins/page_notes/page_notes.js
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
ļ/DefaultSettings/Prototype_Files/plugins/page_notes/page_notes.js
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
ļ/DefaultSettings/Prototype_Files/plugins/sitemap/sitemap.js
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
ļ/DefaultSettings/Prototype_Files/plugins/sitemap/sitemap.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
ļ/DefaultSettings/Prototype_Files/resources/Other.html
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
ļ/DefaultSettings/Prototype_Files/resources/Other.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
ļ/DefaultSettings/Prototype_Files/resources/scripts/player/axplayer.js
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
ļ/DefaultSettings/Prototype_Files/resources/scripts/player/axplayer.js
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
ļ/DefaultSettings/Prototype_Files/start.html
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
ļ/DefaultSettings/Prototype_Files/start.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
ļ/Model.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
ļ/Model.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral17
Sample
ļ/Platform.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
ļ/Platform.dll
Resource
win10v2004-20220812-en
General
-
Target
fd060bb43e96aff7070dffdcc039b90c48f436d1db28a79810f47686637bd387
-
Size
3.2MB
-
MD5
3ad8cd035c927f16e9dcbdefb364e8a4
-
SHA1
fec9936ef7d37c3353f6d86bfe93a20176f9df5f
-
SHA256
fd060bb43e96aff7070dffdcc039b90c48f436d1db28a79810f47686637bd387
-
SHA512
de305b947b17c13c8a7a743ee1e48937f938b14f919143c43dc2a0a8ab5774064a1bd8a0618affc741ac746c213f0a1d393db8b997f6c1173fd8fb67c4bb4a83
-
SSDEEP
49152:QYzwORx2RBoq7nYYUdHPU14ZZuQrvD5uOCs+F0EnQA20VQlKnkbLBNhA8TQossSi:rzi//LYYEPU14H75Ta0CtVlnkZNhPJMi
Malware Config
Signatures
Files
-
fd060bb43e96aff7070dffdcc039b90c48f436d1db28a79810f47686637bd387.zip
-
ļ/Client.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ļ/DefaultSettings/Prototype_Files/plugins/debug/debug.js.js
-
ļ/DefaultSettings/Prototype_Files/plugins/page_notes/page_notes.js.js
-
ļ/DefaultSettings/Prototype_Files/plugins/sitemap/sitemap.js.js
-
ļ/DefaultSettings/Prototype_Files/resources/Other.html.html .js
-
ļ/DefaultSettings/Prototype_Files/resources/scripts/player/axplayer.js.js
-
ļ/DefaultSettings/Prototype_Files/start.html.html
-
ļ/Model.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ļ/Platform.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ļ/lang/default