Overview
overview
10Static
static
Contract.lnk
windows7-x64
10Contract.lnk
windows10-2004-x64
10deadlier/o...es.cmd
windows7-x64
1deadlier/o...es.cmd
windows10-2004-x64
1deadlier/respite.dll
windows7-x64
10deadlier/respite.dll
windows10-2004-x64
10sultanas/i...ng.dll
windows7-x64
10sultanas/i...ng.dll
windows10-2004-x64
10sultanas/m...ty.cmd
windows7-x64
1sultanas/m...ty.cmd
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Contract.lnk
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Contract.lnk
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
deadlier/organdies.cmd
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
deadlier/organdies.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
deadlier/respite.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
deadlier/respite.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
sultanas/improving.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
sultanas/improving.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
sultanas/materiality.cmd
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
sultanas/materiality.cmd
Resource
win10v2004-20220901-en
General
-
Target
Contract1014.iso
-
Size
1.7MB
-
MD5
58672580755e0daab7fe637ecb67016b
-
SHA1
7eb29ac51e4c457dd9adfd1c5b088fb309a0c84a
-
SHA256
a39ef003798bc1464e6779c72dadb850263c5b4ba9374123b2fe7956a1f537bc
-
SHA512
1df7c26bb83fac8383852c8f41ac83017c08daa6eb3b044e36cb089cf08b1cfa74a82c7f5953da11cd7595ef6029355d4c3b36e2a1c0470ef555ac730fa5771c
-
SSDEEP
49152:Rb0hEaBcNxM4bP7ThEaBc9xM44HiHgHtenHHgZwzwhwHHH2wgwZHHHHZwow:Oh/CNxMch/C9xM
Malware Config
Signatures
Files
-
Contract1014.iso.iso
-
Contract.lnk.lnk
-
deadlier/dragged.jpg.jpg
-
deadlier/organdies.cmd.cmd .vbs
-
deadlier/respite.ssd.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 393KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
deadlier/wherefores.txt
-
sultanas/improving.ssd.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 393KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
sultanas/materiality.cmd.cmd .vbs
-
sultanas/reprehension.txt