Static task
static1
Behavioral task
behavioral1
Sample
$RECYCLE.BIN/$I2M8ZT6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
$RECYCLE.BIN/$I2M8ZT6.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
$RECYCLE.BIN/$R2M8ZT6.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
$RECYCLE.BIN/$R2M8ZT6.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
67_03_635_PDF.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
67_03_635_PDF.exe
Resource
win10v2004-20220901-en
General
-
Target
67_03_635_PDF.zip
-
Size
6.0MB
-
MD5
7e9feb691a45a5261c03d494fb13c411
-
SHA1
433934d3e455abb51e8d96560a984d104346e3da
-
SHA256
67150053a1165ad21d5d7ea59ee204683ac66f5fc35885ec1375c647a001c70f
-
SHA512
abf4dc6c4be9a69b0c3c4b2481a0fbf5f391fedeec48df914aea2dfc358f5f13240e941e5387e169811efe44a6b72ced88e59e4b339662403df12fd2c7def4f4
-
SSDEEP
98304:f8nh30q9dtee2/ILp+297Mj3vUfSeMtqw+HYd+Kb5mvEdE+oU10B+e82:f8hE8aJgtJ+jfUqexw+HHKbMvEW+rZ2
Malware Config
Signatures
Files
-
67_03_635_PDF.zip.zip
-
67_03_635_PDF.vhd.vhd
-
$RECYCLE.BIN/$I2M8ZT6.exe
-
$RECYCLE.BIN/$R2M8ZT6.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$RECYCLE.BIN/desktop.ini
-
67_03_635_PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
System Volume Information/WPSettings.dat