CO7917.iso
- SHA256 967af76e6be779d060174f3e3231bd8e3f88b3af26043952bcf67146ca750756
Static task
static1
Behavioral task
behavioral1
Sample
CO.lnk
Resource
win7-20220812-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
CO.lnk
Resource
win10v2004-20220812-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
judicature/stereotypes.dll
Resource
win7-20220901-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
judicature/stereotypes.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
judicature/unfurled.cmd
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
judicature/unfurled.cmd
Resource
win10v2004-20220901-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target CO7917.iso
- Size 1.8MB
- Sample221101-brdvgafgfl
- SHA256 967af76e6be779d060174f3e3231bd8e3f88b3af26043952bcf67146ca750756
- MD5 0cb80c1b2f1eed62cff436dbab115bb1
- SHA1 8a1a250c02372a4ac8411e84c2122a04661be167
- SHA512 033edc86f3a05a5808388b628088d517f23c402567b7a6eaa09e054d933f1abc92ae895ca532d0ce4a5866fe7616714f946fb252a2be2d9e9c9c102a5fdaa152
- SSDEEP 24576:vHrdOBKJGDcYOGm+FpvC04Rl3ZC499TlgxE29S3GYOk8YdSkQGlZ:vHrs9dm+n60YZCZY3xR8Ydk8
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
CO7917.iso.iso 1.8MB
-
CO.lnk.lnk 1KB
-
judicature/butting.txt159KB
-
judicature/stereotypes.dat.dll 1.6MB
-
judicature/unfurled.cmd.cmd .vbs 706B
-
judicature/velvety.png.png 62KB
CO.lnk
- SHA256 5df2756a7d76d95678704d977c845838e8e3d9829303cbacf6862992824de4bc
- MD5 bb0fe0507c4f04d2c3d98579671a1754
- SHA1 44a7064bec374a3092999123fda8abb3624738f7
- SHA512 98deac66c986684f29a95da42942a3946036a7b60a3d94a6cf642db02cb34953a423f7b69f569195788714f3b71c08a12e16244e32896603e7347d2e609e96c5
- MD5 SHA1 SHA512
judicature/butting.txt
- SHA256 6b8c8eb5f5c21042b6a40353618f9f438a87a5a0e1bf5d82e893b61c4e49db95
- MD5 ca4c472dbf45445c924b1243e45d9c42
- SHA1 596226f8fde516ce763ef5ed49cfbc9891606227
- SHA512 0ddcb7ce0fbf485086035cdf7630a0e3058fd23b36ab05c05318a51a0a271db8859316e3ac00cadc296774e6e0077f844099404868535754d32ab7983e01cf84
- SSDEEP 1536:xtxvkBU8nWStxvaQ+Q1UOMaaBhxTvvtNZQ+MUaByuM+3hUlDUaB/KMaltQ8nKqMg:xtsFt/HbMNhDM3bMQq3iMERMg
- MD5 SHA1 SHA512 SSDEEP
judicature/stereotypes.dat
- SHA256 d7d2cf77d905a0e182948d7df8ee7e8fc63538bd98ea3a3ff0548ecb25da61c1
- MD5 5a3c20a85d0e7f0719f0f383003a8e7e
- SHA1 4bf6ef415557e9001973f948d1f6022ba2a6f8b5
- SHA512 67e7fb834d2bce86bc1f142c6adfcec9dfb677412d606b8754bb35fae394c9fbe2580c291258efd0ac1318af89f43d674afd20751a4130c75bf74360b9a7c031
- SSDEEP 24576:hdOBKJGDcYOGm+FpvC04Rl3ZC499TlgxE29S3GYOk8YdSkQh:hs9dm+n60YZCZY3xR8Ydkh
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ef:26:e2:3a:1e:f8:ba:27:20:7f:13:ea:b3:ab:9f:14:07:e6:b8:6e
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=HLERBUOWZPFLKGSQIB
Serial Number
25:d0:47:6a:fb:cd:07:98:44:a4:de:3d:60:ad:eb:cb
Issuer
CN=HLERBUOWZPFLKGSQIB
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2022 - Dec 31, 2039
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 11, 2022 - Aug 10, 2033
Minor OS version
Major OS version
Entry point
1277276
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
98KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
221KB
Virtual Size
221KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
judicature/unfurled.cmd
- SHA256 90a012105ead69186390230ee02c7aef3502f5efe2e38f488902451dd5dc1525
- MD5 5d47c27351e30320cfec0685dc7737ce
- SHA1 2c444480f558539b90677d9cb4876f9a9fe3ca7a
- SHA512 c890eef945e7ab8c60095fd2ccd14427d76d8d6b7fd4cc96a62d1335bcc6baa69098a6de7f60fd026f041f8ef11b74720024dbd959bea8f53b7be44aff2a006f
- MD5 SHA1 SHA512
judicature/velvety.png
- SHA256 ad81af3aab285fde823ff98745d474137c7c9c15a5a549d22112d00334bb82cc
- MD5 5a5e2b2dcf4661292467b66b5e37d4e0
- SHA1 8dc0bb328210994074eef4ec84bc367bdb770743
- SHA512 dcb6225862e7da045666df6ba058489abedd18a802a9b1e6d05a21afc59dd8b83bb9c3461ec47da30fcd5bde9e66630d8b11dd1e6f512748d045ed231c6e4a24
- SSDEEP 1536:Lfw4Nc2dnDM7KMmRlrS6FClBx1KHjFzZ3B1tDSDA4nTf1LwK1QzVYtFB:Lfw4NcGnDWmp8nx1WjFzZtT4nThv1cVU
- MD5 SHA1 SHA512 SSDEEP