Static task
static1
Behavioral task
behavioral1
Sample
Pravicy Policу/Korean.ps1
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Pravicy Policу/Korean.ps1
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
SoftwareFilеSеtuр.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
SoftwareFilеSеtuр.exe
Resource
win10v2004-20220812-en
General
-
Target
SoftwareFilеSеtup.zip
-
Size
1.3MB
-
MD5
a04a970024b65b4670bcbb4bd1dab296
-
SHA1
8c42ed5865e93a3ac5233f30588f8580e9aae3cc
-
SHA256
f7b8c929784eb3eeacb0487525165fcc682925bad952204b477a656f02dd3876
-
SHA512
18476b8d282dd6144f15090d3f302162b53ab977b4c193e5bc12cb3965b7d6d6aaf7abe1bcf46cc41e22d5ac0461dc1189560b2eee885b0b79000adb045198f2
-
SSDEEP
12288:0289y6KCttMqC+r4Gie5ch/K7DnqtSPsdhQqBUsW/a2:nwyBCXMaTnKh/LSwdBUsWF
Malware Config
Signatures
Files
-
SoftwareFilеSеtup.zip.zip
Password: 2022
-
Pravicy Policу/Croatian.ini
-
Pravicy Policу/Czech.ini
-
Pravicy Policу/Danish.ini
-
Pravicy Policу/English.ini
-
Pravicy Policу/Finnish.ini
-
Pravicy Policу/Hebrew.ini
-
Pravicy Policу/Hungarian.ini.ps1
-
Pravicy Policу/Indonesian.ini
-
Pravicy Policу/Japanese.ini
-
Pravicy Policу/Kazakh.ini
-
Pravicy Policу/Korean.ini.ps1
-
Pravicy Policу/Kurdish.ini
-
Pravicy Policу/Lithuanian.ini
-
Pravicy Policу/Norwegian.ini
-
Pravicy Policу/SimpChinese.ini
-
Pravicy Policу/Sinhala.ini
-
Pravicy Policу/Slovak.ini
-
Pravicy Policу/Swedish.ini
-
Pravicy Policу/Thai.ini
-
Pravicy Policу/TradChinese.ini
-
Pravicy Policу/Ukrainian.ini
-
Pravicy Policу/Uyghur.ini
-
Pravicy Policу/UyghurLatin.ini
-
Pravicy Policу/Uzbek.ini
-
Pravicy Policу/Vietnamese.ini
-
SoftwareFilеSеtuр.exe.exe windows x86
Password: 2022
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ