Overview
overview
10Static
static
NGH39.iso
windows7-x64
3NGH39.iso
windows10-2004-x64
3FF.vbs
windows7-x64
10FF.vbs
windows10-2004-x64
10data.txt
windows7-x64
1data.txt
windows10-2004-x64
1swore/personalize.txt
windows7-x64
1swore/personalize.txt
windows10-2004-x64
1swore/pestle.txt
windows7-x64
1swore/pestle.txt
windows10-2004-x64
1swore/remounting.dll
windows7-x64
10swore/remounting.dll
windows10-2004-x64
10Static task
static1
Behavioral task
behavioral1
Sample
NGH39.iso
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
NGH39.iso
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
FF.vbs
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
FF.vbs
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
data.txt
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
data.txt
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
swore/personalize.txt
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
swore/personalize.txt
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
swore/pestle.txt
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
swore/pestle.txt
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
swore/remounting.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
swore/remounting.dll
Resource
win10v2004-20220901-en
General
-
Target
NGH39.iso
-
Size
708KB
-
MD5
322d7cabfc5e30aab76e7b85c1182da0
-
SHA1
96111fa837c73f4b25cb1d0c4a6809b8bc52ad4e
-
SHA256
fe04cf710700a364c38f52835fa222dc9dfd01002f1f1fdaf64cd758ce8f8c6b
-
SHA512
d6e9029329d9f3458388cb62a05a61cd113b42fd295406253bcf09d542d517bd42ac4bc145e7c99d4ebf6373e737874fdc13ccb2ff9265b46a0686df6fbb02b7
-
SSDEEP
6144:mK81aGEoSvma0lgTxwBT0kqnYMXq0lDUUTGpsmLlDF/lDdosW2HOuNb0iFXplD1t:mts+9g9wBkX4Hp5uTBppLM
Malware Config
Signatures
Files
-
NGH39.iso.iso .vbs
-
FF.vbs.vbs
-
data.txt
-
swore/personalize.txt
-
swore/pestle.txt
-
swore/remounting.temp.dll .js windows x64