Static task
static1
Behavioral task
behavioral1
Sample
WP.vbs
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
WP.vbs
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
metaphysic/possessively.ps1
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
metaphysic/possessively.ps1
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
metaphysic/privates.vbs
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
metaphysic/privates.vbs
Resource
win10v2004-20221111-en
General
-
Target
ccd992c3-0acd-435a-91ee-fce540a56abc.zip
-
Size
648KB
-
MD5
434801a4ec88d0dc363ffb338cdbdb8f
-
SHA1
8f3b63a7a46ee054bc4cb00a35d1d7ef860e62a2
-
SHA256
4e4ef37cbbe04766712cd6a9dd1985f718f7dd82fecf00ade30a018ad2146c7a
-
SHA512
a62b7231d6eff03ee74f0ba32027cc6ea092c76c526e03b7aabfbe170f23e3a3f10638fbb6612c7ae75c6e010aed1e9c46a01742e14f2afe763a6f82801442fe
-
SSDEEP
12288:G6sP48WK88PQc5TK/2gzUTMsCtnI2JXjYHpE/dYleN8dHY0Fa6Do/igKieJomuK:GIlK88PL62ynBJXjYHS/dYlE8dnFa828
Malware Config
Signatures
Files
-
ccd992c3-0acd-435a-91ee-fce540a56abc.zip.zip
Password: nov123
-
TS-795WP.iso.iso
Password: nov123
-
WP.vbs.vbs
-
header
-
metaphysic/choked.txt
-
metaphysic/imprints.gif
-
metaphysic/possessively.ps1.ps1
-
metaphysic/preyed.txt
-
metaphysic/privates.vbs.vbs
-
metaphysic/readme.txt
-
metaphysic/simmers.jpg.jpg
-
metaphysic/typewrite.png.png