Static task
static1
Behavioral task
behavioral1
Sample
WP.vbs
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
WP.vbs
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
metaphysic/behead.ps1
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
metaphysic/behead.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
metaphysic/supposable.vbs
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
metaphysic/supposable.vbs
Resource
win10v2004-20220812-en
General
-
Target
JR-820WP.iso
-
Size
1.2MB
-
MD5
414992545e2ddce67cf1617b0f0148ee
-
SHA1
f78125879ed549f2dd801f9dc6d5d21c4cb267d3
-
SHA256
822f96d0c519e560949a9cba3b14dd41b0c354ca07b3ac42d56b21d599acb587
-
SHA512
c08af2d5dce2b430c15502d4383855497eabb7fe8feb9474e020e1891cb026cb0d958765cf3802ef16ff163a36cccf6ea61259b7e0fd34e0890bbedf2332513b
-
SSDEEP
24576:gFolOZ7iw5ywfHH3vwLwZ0RV9Z0OEdMd2z52kqAaBJP8fnLJ518VCqoI2ytHS:gFolOZ7iw5ywfHH3vwLwCuDHAHS
Malware Config
Signatures
Files
-
JR-820WP.iso.iso .ps1
-
WP.vbs.vbs
-
metaphysic/behead.ps1.ps1
-
metaphysic/choked.txt
-
metaphysic/imprints.gif
-
metaphysic/preyed.txt
-
metaphysic/readme.txt
-
metaphysic/simmers.jpg.jpg
-
metaphysic/supposable.vbs.vbs
-
metaphysic/typewrite.png.png