tXH6pgipgRBfBGAWJ0KkF00tAv9arojm3dBr2MHMUac.bin
- SHA256 b571faa608a981105f0460162742a4174d2d02ff5aae88e6ddd06bd8c1cc51a7
Static task
static1
Behavioral task
behavioral1
Sample
DETAILS.lnk
Resource
win7-20220901-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
DETAILS.lnk
Resource
win10v2004-20220901-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
HcDTvUxhMvlLtX.dll
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
HcDTvUxhMvlLtX.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
lZrFnyxCjMmiEL.bat
Resource
win7-20220812-en
windows7-x64
9 signatures
150 seconds
General
- Target tXH6pgipgRBfBGAWJ0KkF00tAv9arojm3dBr2MHMUac.bin
- Size 2.3MB
- Sample221019-t493jsgdak
- SHA256 b571faa608a981105f0460162742a4174d2d02ff5aae88e6ddd06bd8c1cc51a7
- MD5 cde5d48f6b460234aea878aaf816eb6e
- SHA1 aab774d9da9efc296c9951578f264075e719b9a1
- SHA512 5ed0524ec7911ac190e88de7e480446c2cc80e89f8180fc397b71523149e6c77c09e5e5b67abc7d04352dbf87d77c49cf7b0b0c82665ac46504ee707ecffb698
- SSDEEP 49152:wf3/T7IEjqQK7GmsMKyNFyHbL8A0B1cJP:g3//3mn7G0vy7QA0B1cJP
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
tXH6pgipgRBfBGAWJ0KkF00tAv9arojm3dBr2MHMUac.bin.iso 2.3MB
-
DETAILS.lnk.lnk 995B
-
HcDTvUxhMvlLtX.dll.dll 2.3MB
-
lZrFnyxCjMmiEL.bat1KB
DETAILS.lnk
- SHA256 7e4816c16bd3766ccb4dba5e4dff725f3936233f8aff9cddb904347f17118cd7
- MD5 cadc4156a4d9e1c398f6eb54957a8c9b
- SHA1 2fe2e1366bfcb30249188043d14f6cb749292989
- SHA512 88a8c007d791c7dccf500762a587dd4438da4c53253cb43588e7ac216cd77ba97d5f6d59559a671ebcc120b8f2ae2befc6e03d5f3b8024c8d529f5805058db4e
- MD5 SHA1 SHA512
HcDTvUxhMvlLtX.dll
- IMPHASH b8c7ac853ff3233d99289b6348a6ed4f
- SHA256 c78290da99475f965ce54f737e0927a9855e03c9a27f2ee7a797562533779305
- MD5 bc1835f0440c14366ec2f9938e4f3179
- SHA1 8baed6529536aec22a320248b3dc80d02d6e3219
- SHA512 b303957bce012e38ddfb78c9dd0237647623dcfff7919feadceef1f0f52185ead5dcab94f65597abc97d979d8b0735086f83b575f3117324e70f2871f8398134
- SSDEEP 49152:if3/T7IEjqQK7GmsMKyNFyHbL8A0B1cJPr:K3//3mn7G0vy7QA0B1cJPr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
90:d9:5b:6b:82:56:36:d2:c2:3f:b1:77:c1:e3:d5:c1:a0:96:42:ff:3a:1a:e8:27:32:0c:20:65:87:28:8b:6f
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
Major OS version
Entry point
76812
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
SetCurrentDirectoryA
CreateFileA
FindClose
FindFirstFileA
FindNextFileA
GetFileSize
GetFileType
CloseHandle
HeapCreate
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
CreateThread
GetCurrentThreadId
SuspendThread
SwitchToFiber
CreateFiber
ConvertThreadToFiber
GetTempPathA
CallNamedPipeA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetCurrentProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
GetStdHandle
GetACP
GetStringTypeW
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetStdHandle
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
ReadFile
ReadConsoleW
CreateFileW
RaiseException
FileUpload
KJtYlq
Name
.text
Size
197KB
Virtual Size
197KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
661KB
Virtual Size
661KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lZrFnyxCjMmiEL.bat
- SHA256 88da40b5d0a5d9b1adeda161d460ea7598211ab52bc2eac03a098eb665994a16
- MD5 51e6d846c536f09bb850653ae80658ba
- SHA1 00d1f6aeb5eb543ea5dbcbabd1ecf150d835e252
- SHA512 1f1043cd472355f5532eb18678b3ebfd1b805910c8b3f9faa6430a4d84434eeab6d5f561cfa1dc568371e82d7d6fdb49d3e98865dfc858c318d038ca9fcaafbc
- MD5 SHA1 SHA512