Overview
overview
3Static
static
White-Cryp...on.vbs
windows7-x64
1White-Cryp...on.vbs
windows10-2004-x64
1White-Cryp...on.vbs
windows7-x64
1White-Cryp...on.vbs
windows10-2004-x64
1White-Cryp...XP.vbs
windows7-x64
1White-Cryp...XP.vbs
windows10-2004-x64
1White-Cryp...m1.vbs
windows7-x64
1White-Cryp...m1.vbs
windows10-2004-x64
1White-Cryp...ut.vbs
windows7-x64
1White-Cryp...ut.vbs
windows10-2004-x64
1White-Cryp...e1.vbs
windows7-x64
1White-Cryp...e1.vbs
windows10-2004-x64
1White-Cryp...OF.vbs
windows7-x64
1White-Cryp...OF.vbs
windows10-2004-x64
1White-Cryp...Pe.vbs
windows7-x64
1White-Cryp...Pe.vbs
windows10-2004-x64
1White-Cryp...is.vbs
windows7-x64
1White-Cryp...is.vbs
windows10-2004-x64
1White-Cryp...ox.vbs
windows7-x64
1White-Cryp...ox.vbs
windows10-2004-x64
1White-Cryp...ox.vbs
windows7-x64
1White-Cryp...ox.vbs
windows10-2004-x64
1White-Cryp...in.vbs
windows7-x64
1White-Cryp...in.vbs
windows10-2004-x64
1Stub.exe
windows7-x64
1Stub.exe
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
White-Crypt/Button.vbs
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
White-Crypt/Button.vbs
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
White-Crypt/Formularios/Button.vbs
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
White-Crypt/Formularios/Button.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
White-Crypt/Formularios/CommandXP.vbs
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
White-Crypt/Formularios/CommandXP.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
White-Crypt/Formularios/Form1.vbs
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
White-Crypt/Formularios/Form1.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
White-Crypt/Formularios/frmAbout.vbs
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
White-Crypt/Formularios/frmAbout.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
White-Crypt/Modulos/Module1.vbs
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
White-Crypt/Modulos/Module1.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
White-Crypt/Modulos/mEOF.vbs
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
White-Crypt/Modulos/mEOF.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
White-Crypt/Modulos/mRunPe.vbs
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
White-Crypt/Modulos/mRunPe.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
White-Crypt/Modulos/mdlAnubis.vbs
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
White-Crypt/Modulos/mdlAnubis.vbs
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
White-Crypt/Modulos/mdlJoeBox.vbs
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
White-Crypt/Modulos/mdlJoeBox.vbs
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
White-Crypt/Modulos/mdlSandBox.vbs
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
White-Crypt/Modulos/mdlSandBox.vbs
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
White-Crypt/Modulos/mdlVMCobein.vbs
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
White-Crypt/Modulos/mdlVMCobein.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
Stub.exe
Resource
win7-20221111-en
Behavioral task
behavioral26
Sample
Stub.exe
Resource
win10v2004-20221111-en
General
-
Target
a4629531197db10426b08e8279581582955e0164e35d88c1e21366ae8c8e4458
-
Size
278KB
-
MD5
df0253701fa4ca63f9b062c86eace76d
-
SHA1
09bc54fb36e77a627814039187261350e5cd292c
-
SHA256
a4629531197db10426b08e8279581582955e0164e35d88c1e21366ae8c8e4458
-
SHA512
1d24a31ee14c512af4a0ab383b3c11775b2254744a910cc9de0b966ad9efce685da9d5fd03f64e68f94adaefea6d56ee79f8f73136f24740c2ec02f4f9b20854
-
SSDEEP
6144:WA92bhjDByOqHCsSm6vrBP4sr9alOb8wEremA0LbupG3+yH7fQ:WA92bBJqihm6BPMEEeGr3jbQ
Malware Config
Signatures
Files
-
a4629531197db10426b08e8279581582955e0164e35d88c1e21366ae8c8e4458.rar
-
White-Crypt/Button.ctl.vbs
-
White-Crypt/Clases/RC4.cls
-
White-Crypt/Clases/XOR.cls
-
White-Crypt/Cliente.vbp
-
White-Crypt/Cliente.vbw
-
White-Crypt/Formularios/Button.ctl.vbs
-
White-Crypt/Formularios/CommandXP.ctl.vbs
-
White-Crypt/Formularios/Form1.frm.vbs
-
White-Crypt/Formularios/Form1.frx
-
White-Crypt/Formularios/Form1.log
-
White-Crypt/Formularios/Proyecto1.vbw
-
White-Crypt/Formularios/frmAbout.frm.vbs
-
White-Crypt/Imagene/Thumbs.db
-
White-Crypt/Imagene/cogollofirma.bmp
-
White-Crypt/Modulos/Module1.bas.vbs
-
White-Crypt/Modulos/mEOF.bas.vbs
-
White-Crypt/Modulos/mFunctions.bas
-
White-Crypt/Modulos/mRunPe.bas.vbs
-
White-Crypt/Modulos/mdlAnubis.bas.vbs
-
White-Crypt/Modulos/mdlJoeBox.bas.vbs
-
White-Crypt/Modulos/mdlSandBox.bas.vbs
-
White-Crypt/Modulos/mdlVMCobein.bas.vbs
-
White-Crypt/Stub.vbp
-
White-Crypt/Stub.vbw
-
White-Crypt/StubMOD.rar.rar
-
Stub.dll.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
White-Crypt/Thumbs.db