Static task
static1
Behavioral task
behavioral1
Sample
WP.vbs
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
WP.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
metaphysic/disgorgement.ps1
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
metaphysic/disgorgement.ps1
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
metaphysic/reprimanded.vbs
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
metaphysic/reprimanded.vbs
Resource
win10v2004-20220812-en
General
-
Target
72244463-c311-4e9d-9c69-52bab6ca999b.zip
-
Size
648KB
-
MD5
68f84648430626603534d4d8f9f0e96a
-
SHA1
d0df540d10e3a0f4d7e415d73660a37e9843ae1e
-
SHA256
6a58985988d3246160b99a1bb9f0999d3477f3855cca44f1638ffcd2f8c6aaf3
-
SHA512
4fb534eb5b298aa93041d5ab5cd50293a65d715c5259fdd33d54ebf5dd9d8d359ab0318aa5d011b8741b368d0ad32d09f9d5f772884c40f5b81563a64dcc3f0f
-
SSDEEP
12288:o/c3oKQy6Ye9/IC31ich+TMS53dmAinCz4LTYdG3Uj4Zvgk:756/VIAZPWiCzw3Upk
Malware Config
Signatures
Files
-
72244463-c311-4e9d-9c69-52bab6ca999b.zip.zip
Password: nov123
-
LK-284WP.iso.iso
Password: nov123
-
WP.vbs.vbs
-
header
-
metaphysic/choked.txt
-
metaphysic/disgorgement.ps1.ps1
-
metaphysic/imprints.gif
-
metaphysic/preyed.txt
-
metaphysic/readme.txt
-
metaphysic/reprimanded.vbs.vbs
-
metaphysic/simmers.jpg.jpg
-
metaphysic/typewrite.png.png