�8�?�W-]���&)��Cu9��>+�z]��sB�[ZT��l�����J|/�/�sC[�_�f��T�� �8�2��-`�mav�� �)��`�#���S�'-�3�J��~9��k�OO��4�M(�mP-�9GA�r:����XRe���٢!(��DZ�7����r���ʋz��)=�>�Sf��.C�t d-$�)��Dg-��k���H�~�RP�Uv<��\<�P��V�"��z��g���zk� ��}�$�CV;�w��=�]֛ϥ'��rV,�N�0�b����/iK�,;��P�z8�9Z�>�L�R�!�x�nzOe7tF���r�pn�d�vn��/���@L���mT0��t���5M�C����9夃�с�B*) F����$?c\��VN�������DUO��>p��2���u;�D��s�w�� ^eu���q��x@/a[�k �9Ue��w�.���\���^_h��c���������)y��L:Tη���>�����QZ��rוXj�7�.����H��i:A��>v�#����w�����/�n���:�߲����pࡡ��e��5�]8�'^����H>NJn��_:M�|Z�ϝ�|i;TŒ��8}i'�mlu?�@����PjD��d��o�I}������r�+��%��rR��k����=՚sM٪6�*M�+4�ߊݖ������jL��M$jD|۵�9�����q�������ѝE�e��do���<Rc�2>����=7C!�L��f\��*��\DB�ҥ�MfƩ�K�6�Q��m�<��fS�ҟ������xc1,2�9�%�Hgۆ�����M��Ċ�x�*ؒ�ڐ��LpY.a�P�$���� �۵���������4�1�"p�'H���ʽ�H���C�������T:�e�n&_�5����Y��A�m�9[LI��c2 �E�h��c����˟�}����r��T�d)v�B[�4*�#q�@�b(�&)���;IJ���5��˞�����<H/CA}���������xN\����,�B��^ u������X�x�&pTG����Pػ���/��8t骐�.<���� �o�EI0��£���a��/��� �N� c���>_T�'`wR�+�ރǁ�A��� �C�%��vZq�\79�� v�J��BA�e���<�N�&�]���8�ы�[D3���w����k��� ���)\�r�1�`�7�Iټ*�����t�̹�J�4�E��Y���Ɵ��:���kf�nR��p���!\�~��l��{�?�q����+/����3��]cv�73�.Gbr��e;Oi�5k%�V7�F����&���j���f8�$��قi��[Xb��g��<�����wrT"�t��Z�� m%�-�@��ו����̽�6� h���{�]�=#���j�ݻR��7ƶ|�����s��3 ��#����Za�ݜ)u�F���Z'� �h�4���ǚ�������k[uR�{~K���:�)� 3�\N����xf���!����\P�Sx8�p���E�� [MVl;p7)�^��A=d�Z�����Q�n5�\�z�/$JûuN<��t�������2��������sC�a4 �To� Ur���WZ/����+��*ۙ�a�k��p���Q��E�]���W�&V+������?]��)Uw���۵�V���s�6u��|�9�^�B��ݳTk����J�&m�+(����0���!���r�~i�$�h�l���:�:`�}�r��>zp�CfԮ�!Ok�����=h����5"����t��[�N��տ�u�=��Uӽ��n.k��r�o���jR��G�����ځ�'�4�1�p��%�Xԑ]���H)�]�B1���J�z����:'d�=hV��H���%x�a&Xy��y;[��3g����~�`h�^�w�U���߶y:�\/�TLZ�U�LM�᷷�P������t����ð�R>̇>��?�gh� ��[">�,��%�u}�(��G(y�?�g�T���J��U�_����Zx�{�hm2�f���M 9܆���U�h)�*_7�]\��#�4=�8��X�� ����?�-B����ܗ&Қr��F���E,٩?'�"�Zf�(�H�H�_ å�KЫ�����;Q��('�ي����oI�����]���#2e���{�{�H�7� �j��k1lP�퉦:e������'A���4h��xJ�3�p��>>#h:(����E�z � ��� �UiӼ�~� ��4�4��q�0�?v}�5�M�����~��7�=w�aO��[�=7�?�H��S�\� ��^�}��M�#�����^����ƍ4c9!jYl~k>��Y1���OyFV�Ǘ�_�(�[>��]� ��<Iv|��������j�r�6)D�, ���CFU��H�?$l<����o����dJ���RO�藵x����˹K%�Y�] ���� �Y�#+��������`�A돐&��$����,Ԝb���i�J�$�9��ۉ��I��5���'b7)��ӽ�\��D�KKB�@uʬlC:s�����Y�̨�jЄU�4�3�x6(Mڶfw��v|Ē�E!s7�3����+�f��F��k�wR��ξҙ}#��tx��#8�ClK��*��V����:W�Ąj�rU�HT�a�u�!25��NW��o��©� p?nP�߭���# Z��:��3 8[��μ�Sz��ַ��z�أ�TT넺Z_�"FP� ;0�Pª�4ru�+���U={V��-�5 d�Y����~�����$�I>����*��MX���AхL����y)�������<���I{�Gd'�Im�0����#.���ۙ[aq�?�������@+�IۖA���k��&� �s|>�o��K����J��)F�{4�����_�@����aȁ�1���dWM�X�9��5�!3�r���T���H��[���i���&%���@H��� B$����ڙq�h\#�黪�k)Xal&W�p���L�7e!���*��U���ܪ��4���7�NI��&
Static task
static1
Behavioral task
behavioral1
Sample
EnemyFront+8Tr-LNG_v1.0/EnemyFront+8Tr-LNG_v1.0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
EnemyFront+8Tr-LNG_v1.0/EnemyFront+8Tr-LNG_v1.0.exe
Resource
win10v2004-20221111-en
General
-
Target
4e38f44713251cc2705a9401eb421746bfec877be0e0bdbc2cb23f93275162d1
-
Size
2.5MB
-
MD5
ed093412e883959ea72f3a4865d89698
-
SHA1
b382c8952e4c3d1bd5a6547f38eb07fedc98d1ae
-
SHA256
4e38f44713251cc2705a9401eb421746bfec877be0e0bdbc2cb23f93275162d1
-
SHA512
bd62db5ab67c043070bf71d1501eeb37d7b0933fc7c3aedb4225e661bf784ee06be3e64da40743fe3b699b5a79975355e5310d65236bd43ae9442c03377cd0dd
-
SSDEEP
49152:yuY1DR0EXYspvoLWmbUSPMdFOSMWf0+2A/JfxE8h2AGvSpNBC/e9s7DT8bdSQs/:yuqRpvoLLbUkMjO1W8+2A/Je8jHpN59y
Malware Config
Signatures
Files
-
4e38f44713251cc2705a9401eb421746bfec877be0e0bdbc2cb23f93275162d1.rar
-
EnemyFront+8Tr-LNG_v1.0/EnemyFront+8Tr-LNG_v1.0 - INFO.txt
-
EnemyFront+8Tr-LNG_v1.0/EnemyFront+8Tr-LNG_v1.0.exe.exe windows x86
928070887c71b31777b0bc97ac41e053
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaLbound
kernel32
OpenThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
winmm
waveOutUnprepareHeader
user32
MessageBoxW
Exports
Exports
Sections
.text Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VCrypt0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VCrypt1 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
EnemyFront+8Tr-LNG_v1.0/VERY IMPORTANT!.txt