Static task
static1
Behavioral task
behavioral1
Sample
Originals.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Originals.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
fasteners/overpoweringly.cmd
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
fasteners/overpoweringly.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
fasteners/unclarified.dll
Resource
win7-20220812-en
General
-
Target
Original6990.iso
-
Size
696KB
-
MD5
a34033df6ec053b1cf8f4aa86d6593a9
-
SHA1
a6d31f525d9f3dd16515fac0a85e5f3952b10d86
-
SHA256
bdd287ad13331f806dc761325b02f370234d41e4449b91db78a8c72f68fdaedb
-
SHA512
9e7d80522aec50ee859186b294893f832e198d71184556734796e26521b04d84f7eda67ca587c0b4f56919486848587f9ce7507b4528e99b317bd8b67e8fef96
-
SSDEEP
12288:ya2sTwwDbozbuUijWQ2ieToMjavBRHuZXJMeGbX//IO:yBs1QuUijWHVUM+7OZXJM5T//I
Malware Config
Signatures
Files
-
Original6990.iso.iso .vbs
-
Originals.lnk.lnk
-
fasteners/overpoweringly.cmd.cmd .vbs
-
fasteners/unclarified.dat.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 397KB - Virtual size: 397KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ