Overview
overview
4Static
static
Database/�...�.xlsx
windows7-x64
1Database/�...�.xlsx
windows10-2004-x64
1Database/�...�.xlsx
windows7-x64
1Database/�...�.xlsx
windows10-2004-x64
1Database/�...�.xlsx
windows7-x64
1Database/�...�.xlsx
windows10-2004-x64
1Templete/(...�.docx
windows7-x64
4Templete/(...�.docx
windows10-2004-x64
1Templete/(...�).doc
windows7-x64
4Templete/(...�).doc
windows10-2004-x64
1Templete/�...�).doc
windows7-x64
4Templete/�...�).doc
windows10-2004-x64
1Templete/�...�.docx
windows7-x64
4Templete/�...�.docx
windows10-2004-x64
1Templete/�...).docx
windows7-x64
4Templete/�...).docx
windows10-2004-x64
1Templete/�...�.docx
windows7-x64
4Templete/�...�.docx
windows10-2004-x64
1Templete/�...��.doc
windows7-x64
4Templete/�...��.doc
windows10-2004-x64
1Templete/�...�V.doc
windows7-x64
4Templete/�...�V.doc
windows10-2004-x64
1Templete/�...��.doc
windows7-x64
4Templete/�...��.doc
windows10-2004-x64
1Templete/�...��.doc
windows7-x64
4Templete/�...��.doc
windows10-2004-x64
1Templete/�...��.doc
windows7-x64
4Templete/�...��.doc
windows10-2004-x64
1Templete/�...��.doc
windows7-x64
4Templete/�...��.doc
windows10-2004-x64
1Templete/�...�.docx
windows7-x64
4Templete/�...�.docx
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Database/¾.xlsx
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Database/¾.xlsx
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Database/ȤH~.xlsx
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Database/ȤH~.xlsx
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Database/~.xlsx
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
Database/~.xlsx
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
Templete/(NAB)AγҰh-HΫ.docx
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
Templete/(NAB)AγҰh-HΫ.docx
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
Templete/(NAB-uB{)-siHN¾q(ť).doc
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
Templete/(NAB-uB{)-siHN¾q(ť).doc
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
Templete/ztαbʥӽг(ť).doc
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
Templete/ztαbʥӽг(ť).doc
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
Templete/ȭgӷ~έ¾νլd.docx
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
Templete/ȭgӷ~έ¾νլd.docx
Resource
win10v2004-20220901-en
Behavioral task
behavioral15
Sample
Templete/[O-ҰOӽЮ({ɤHs)).docx
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
Templete/[O-ҰOӽЮ({ɤHs)).docx
Resource
win10v2004-20220901-en
Behavioral task
behavioral17
Sample
Templete/B{ɤH(@)w(@��.docx
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
Templete/B{ɤH(@)w(@��.docx
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
Templete/㵲_26.doc
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
Templete/㵲_26.doc
Resource
win10v2004-20220901-en
Behavioral task
behavioral21
Sample
Templete/dȭHk¾WwiV.doc
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
Templete/dȭHk¾WwiV.doc
Resource
win10v2004-20220901-en
Behavioral task
behavioral23
Sample
Templete/udӽЮ.doc
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
Templete/udӽЮ.doc
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
Templete/OӽЪ.doc
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
Templete/OӽЪ.doc
Resource
win10v2004-20220901-en
Behavioral task
behavioral27
Sample
Templete/MNH㵲.doc
Resource
win7-20220901-en
Behavioral task
behavioral28
Sample
Templete/MNH㵲.doc
Resource
win10v2004-20220901-en
Behavioral task
behavioral29
Sample
Templete/yOҩ.doc
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
Templete/yOҩ.doc
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
Templete/H㵲.docx
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
Templete/H㵲.docx
Resource
win10v2004-20220812-en
General
-
Target
861393c2acd98f3a5a7368254a39375a471ef7d2c8f4708b179808dc1272febc
-
Size
279KB
-
MD5
b8343f5cb2982c3e9dd07b8d0ec7f0f3
-
SHA1
fb50ffc11f7ccac99aa5714018255967367afc00
-
SHA256
861393c2acd98f3a5a7368254a39375a471ef7d2c8f4708b179808dc1272febc
-
SHA512
4651a244a504589392197dd54a92e4f0817e31021e3f18aa601d832ef74689158214bc259ceb453cbb17c487469af8ba2747d2594889b1d8c83677ac849b7d36
-
SSDEEP
6144:5uMhCSYSL8MF6tVDigpupaAT7/USZWx3ASmxL6Hft3jEQI1m1R9xn:E7gLXF0VDFSaATgSkwLGjEt1m1RTn
Malware Config
Signatures
Files
-
861393c2acd98f3a5a7368254a39375a471ef7d2c8f4708b179808dc1272febc.zip
-
Database/¾.xlsx.xlsx office2007
-
Database/ȤH~.xlsx.xlsx office2007
-
Database/~.xlsx.xlsx office2007
-
Templete/(NAB)AγҰh-HΫ.docx.docx office2007
-
Templete/(NAB-uB{)-siHN¾q(ť).doc.doc windows office2003
-
Templete/ztαbʥӽг(ť).doc.doc windows office2003
-
Templete/ȭgӷ~έ¾νլd.docx.docx office2007
-
Templete/[O-ҰOӽЮ({ɤHs)).docx.docx office2007
-
Templete/B{ɤH(@)w(@~Ȼɭ)-NAB.doc.docx .doc office2007
-
Templete/㵲_26.doc.doc windows office2003
-
Templete/dȭHk¾WwiV.doc.doc windows office2003
-
Templete/udӽЮ.doc.doc windows office2003
-
Templete/OӽЪ.doc.doc windows office2003
-
Templete/MNH㵲.doc.doc windows office2003
-
Templete/yOҩ.doc.doc windows office2003
-
Templete/H㵲.docx.docx office2007
-
t.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ