Overview

overview

10

Static

static

ContractCopy_RL43.iso

windows7-x64

3

ContractCopy_RL43.iso

windows10-2004-x64

3

ContractCopy.js

windows7-x64

10

ContractCopy.js

windows10-2004-x64

10

addled/desertions.dll

windows7-x64

10

addled/desertions.dll

windows10-2004-x64

10

addled/petrifies.png

windows7-x64

3

addled/petrifies.png

windows10-2004-x64

3

addled/squawked.png

windows7-x64

3

addled/squawked.png

windows10-2004-x64

3

addled/volcanic.txt

windows7-x64

1

addled/volcanic.txt

windows10-2004-x64

1

data.txt

windows7-x64

1

data.txt

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    EzrnVmjeEFCe8dchBuBQCPw-vIdkovWcsKXpj5TYN2k.bin

  • Size

    474KB

  • MD5

    af9daf97558368fc9a29b8ab11c39a4e

  • SHA1

    e043026bff7c45ffd1aafc6162f477ba26898e70

  • SHA256

    133ae75668de10509ef1d72106e05008fc3fbc8764a2f59cb0a5e98f94d83769

  • SHA512

    9e30bdbdf9c7dc9377b3ceada8d5be4443c1538e0c7e0e0bd3f3e7d8302d98ddcb311b8e3faaf9b2d60bc3e70305291fd47675dcb9872812c6f9ec7184c8ec78

  • SSDEEP

    12288:hpPNzvq7gRQ6I5hDH0IpzE1fV00TCTeuXdNsnM0+1pQL:htNzvIUIpzKfV7CVd+LbL

Score
N/A

Malware Config

Signatures

Files

  • EzrnVmjeEFCe8dchBuBQCPw-vIdkovWcsKXpj5TYN2k.bin
    .zip

    Password: abc321

  • ContractCopy_RL43.img
    .iso .vbs

    Password: abc321

  • ContractCopy.js
    .js .vbs
  • addled/desertions.tmp
    .dll regsvr32 windows x86

    Password: abc321

    704b344e7ffc32e379dd15faa7cd65d3


    Headers

    Imports

    Exports

    Sections

  • addled/petrifies.png
    .png
  • addled/squawked.png
    .png
  • addled/volcanic.txt
  • data.txt