PE#3962[.]iso | Triage

Submit
Reports

Overview

overview

Static

static

3586/6190.cmd

windows7-x64

8

3586/6190.cmd

windows10-2004-x64

8

3586/extinct.dll

windows7-x64

3586/extinct.dll

windows10-2004-x64

Item.lnk

windows7-x64

3

Item.lnk

windows10-2004-x64

3

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

3586/6190.cmd

Resource

win7-20220812-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

3586/6190.cmd

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

3586/extinct.dll

Resource

win7-20220901-en

qakbot banker stealer trojan

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

3586/extinct.dll

Resource

win10v2004-20220812-en

qakbot banker stealer trojan

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

Item.lnk

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Item.lnk

Resource

win10v2004-20220812-en

windows10-2004-x64

1 signatures

150 seconds

General

Target

PE#3962.iso
Size

444KB
MD5

4cf60391efc89945d85ba83c93547d5d
SHA1

adf5411f4bd777f2a2fc7819c63f53f1f22e495e
SHA256

814299de88cde77b7f06476f2abf8f6719d3b8d2184796114c56a6ee08833e61
SHA512

446b426576c4582b4af169e0c7e341313a53e3baa5aec3ccbc4c56f1162d4af1130f3e65e87db000ef46c1166636eb3a1ae62f7a44fbc20bd451e2efbce741aa
SSDEEP

6144:3wWNVNYHWRZMZeiVt5p682MkWgylrBeKd5bYBWzjCvIuwDJnpCKHbrxOG53KPNs:3l5eWt82Mk6lroKsLguiHOPNs

Score

N/A

Malware Config

Signatures

Files

PE#3962.iso
.iso
3586/6190.cmd
3586/extinct.dat
.dll regsvr32 windows x86

3c85ad0d25a101f6044357c668da2423

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
CreateFileA
DeleteFileA
FindFirstFileA
FindNextFileA
SetFilePointer
CloseHandle
GetLastError
ConnectNamedPipe
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
GetCurrentThreadId
GetWindowsDirectoryA
VirtualAlloc
MapViewOfFile
GetProcAddress
CreateFileMappingA
LoadLibraryA
GetTempPathA
CreateNamedPipeA

Exports

Exports

DllRegisterServer
LUdr67
PwR73X

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Item.lnk
.lnk

© 2018-2024

Terms | Privacy