Overview
overview
3Static
static
TZUDLV8mc5...uA.zip
windows7-x64
1TZUDLV8mc5...uA.zip
windows10-2004-x64
1Fisher Spe...er.exe
windows7-x64
3Fisher Spe...er.exe
windows10-2004-x64
3file-acqui...41.xml
windows7-x64
1file-acqui...41.xml
windows10-2004-x64
1files-raw....TR.xml
windows7-x64
1files-raw....TR.xml
windows10-2004-x64
1manifest.json
windows7-x64
3manifest.json
windows10-2004-x64
3metadata.json
windows7-x64
3metadata.json
windows10-2004-x64
3script.xml
windows7-x64
1script.xml
windows10-2004-x64
1sysinfo.Z9...Ee.xml
windows7-x64
1sysinfo.Z9...Ee.xml
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
TZUDLV8mc5ifm6EVRJf0uA.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
TZUDLV8mc5ifm6EVRJf0uA.zip
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Fisher Specification Manager.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Fisher Specification Manager.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
file-acquisition-raw-issues.nT0I89XhxBkakYb4Z7ZO41.xml
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
file-acquisition-raw-issues.nT0I89XhxBkakYb4Z7ZO41.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
files-raw.L9fmfWbwnPkjkmG60BL7TR.xml
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
files-raw.L9fmfWbwnPkjkmG60BL7TR.xml
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
manifest.json
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
manifest.json
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
metadata.json
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
metadata.json
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
script.xml
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
script.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
sysinfo.Z9oScCBPGhb2K0ztj7dLEe.xml
Resource
win7-20220901-en
Behavioral task
behavioral16
Sample
sysinfo.Z9oScCBPGhb2K0ztj7dLEe.xml
Resource
win10v2004-20220812-en
General
-
Target
TZUDLV8mc5ifm6EVRJf0uA.zip
-
Size
1.2MB
-
MD5
35c3a3268badc38de84930d586919430
-
SHA1
062610729e3b8fab87b5ee706461ba81864b1321
-
SHA256
dc63c1414205c339cd3db3f86c81185b378c09294e77eb1ff05bd5d91dd58041
-
SHA512
7e540d2cc133c1a1fa80524c5ce2370956ca0ad84094be99e38a25b4d7148a6e522243eab41a206003ed3bd8d859b98c62c5fd6a566174f61385f490d625460f
-
SSDEEP
24576:WDKEbc3YhL897ojU3QBj7OsX7hEVpN3rPtL7fomZW7MPcyyHlxFbESez0nMpe7qQ:IHoYB897wUgBj7vyRLrom8oPAlxHezuT
Malware Config
Signatures
Files
-
TZUDLV8mc5ifm6EVRJf0uA.zip.zip
Password: unzip-me
-
Fisher Specification Manager.exe_.exe windows x86
Password: unzip-me
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
file-acquisition-raw-issues.nT0I89XhxBkakYb4Z7ZO41.xml.xml
-
files-raw.L9fmfWbwnPkjkmG60BL7TR.xml.xml
-
manifest.json
-
metadata.json
-
script.xml.xml
-
sysinfo.Z9oScCBPGhb2K0ztj7dLEe.xml.xml