Static task
static1
Behavioral task
behavioral1
Sample
WP.vbs
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
WP.vbs
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
metaphysic/crematoria.vbs
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
metaphysic/crematoria.vbs
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
metaphysic/leveler.ps1
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
metaphysic/leveler.ps1
Resource
win10v2004-20220812-en
General
-
Target
KM-532WP.iso
-
Size
101.2MB
-
MD5
4de734650352d165fc8aa24e84747409
-
SHA1
a727847c0286cd092293e09a5a966a2eff7f2222
-
SHA256
deafc124bc097312f31fa48c677945da35e1d2833cd014723fb7b29f92b4c8db
-
SHA512
f71a91e711c1e0cd78cb6dac4e5af2f44fad1ccaf13e9a48d39f0dbf14e52c0d7b44b63505ce38be61190b298be38c69798151c953dfd1b3b5fd5dbf4c59a1e8
-
SSDEEP
24576:TFolOZ7iw/VwfHH3vwLwZ0RV9Z0OEdMd0z52kqAaBJP8fnLJ518VCqoI2ytHE:TFolOZ7iw/VwfHH3vwLwYuDHAHE
Malware Config
Signatures
Files
-
KM-532WP.iso.iso
-
WP.vbs.vbs
-
header
-
metaphysic/choked.txt
-
metaphysic/crematoria.vbs.vbs
-
metaphysic/imprints.gif
-
metaphysic/leveler.ps1.ps1
-
metaphysic/preyed.txt
-
metaphysic/readme.txt
-
metaphysic/simmers.jpg.jpg
-
metaphysic/typewrite.png.png