Static task
static1
Behavioral task
behavioral1
Sample
yara/APT_Blackenergy.vbs
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
yara/APT_Blackenergy.vbs
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
yara/APT_C16.ps1
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
yara/APT_C16.ps1
Resource
win10v2004-20220901-en
General
-
Target
afc168a595c4183af8e6665aa1fe8618a561ad75bea5dc8d5ec14a31f666ad3c
-
Size
86KB
-
MD5
184e4796429bba1eb3c9443f80cdaaa2
-
SHA1
d2c5284da2fd583b04a4b76e021a26d2d583986c
-
SHA256
afc168a595c4183af8e6665aa1fe8618a561ad75bea5dc8d5ec14a31f666ad3c
-
SHA512
7d35faf61444cb3208795f88bb16044296e0a5f28c0a02c4abbeeaad12e680c85205a6ee1a3f0a9ba32f6bc438e824bcc23991b4edac480ca586a0a9a52ff32d
-
SSDEEP
1536:7h5FtIcS1hjbd0MIsOJ5/k1ngOOBrPE4Y2sTUU4z3ZfztzuPeVSdCgZ:7h5ne1hPG5I+BrIUNfzt2egdCgZ
Malware Config
Signatures
Files
-
afc168a595c4183af8e6665aa1fe8618a561ad75bea5dc8d5ec14a31f666ad3c.zip
-
__MACOSX/yara/._APT_APT1.yar
-
__MACOSX/yara/._APT_APT10.yar
-
__MACOSX/yara/._APT_APT15.yar
-
__MACOSX/yara/._APT_APT17.yar
-
__MACOSX/yara/._APT_APT29_Grizzly_Steppe.yar
-
__MACOSX/yara/._APT_APT3102.yar
-
__MACOSX/yara/._APT_APT9002.yar
-
__MACOSX/yara/._APT_Backspace.yar
-
__MACOSX/yara/._APT_Bestia.yar
-
__MACOSX/yara/._APT_Blackenergy.yar
-
__MACOSX/yara/._APT_Bluetermite_Emdivi.yar
-
__MACOSX/yara/._APT_C16.yar
-
__MACOSX/yara/._APT_Carbanak.yar
-
__MACOSX/yara/._APT_Careto.yar
-
__MACOSX/yara/._APT_Casper.yar
-
__MACOSX/yara/._APT_CheshireCat.yar
-
__MACOSX/yara/._APT_Cloudduke.yar
-
__MACOSX/yara/._APT_Cobalt.yar
-
__MACOSX/yara/._APT_Codoso.yar
-
__MACOSX/yara/._APT_CrashOverride.yar
-
__MACOSX/yara/._APT_DPRK_ROKRAT.yar
-
__MACOSX/yara/._APT_DeepPanda_Anthem.yar
-
__MACOSX/yara/._APT_DeputyDog.yar
-
__MACOSX/yara/._APT_Derusbi.yar
-
__MACOSX/yara/._APT_Dubnium.yar
-
__MACOSX/yara/._APT_Duqu2.yar
-
__MACOSX/yara/._APT_Emissary.yar
-
__MACOSX/yara/._APT_EnergeticBear_backdoored_ssh.yar
-
__MACOSX/yara/._APT_eqgrp_apr17.yar
-
yara/APT_APT1.yar
-
yara/APT_APT10.yar
-
yara/APT_APT15.yar
-
yara/APT_APT17.yar
-
yara/APT_APT29_Grizzly_Steppe.yar
-
yara/APT_APT3102.yar
-
yara/APT_APT9002.yar
-
yara/APT_Backspace.yar
-
yara/APT_Bestia.yar
-
yara/APT_Blackenergy.yar.vbs
-
yara/APT_Bluetermite_Emdivi.yar
-
yara/APT_C16.yar.ps1
-
yara/APT_Carbanak.yar
-
yara/APT_Careto.yar
-
yara/APT_Casper.yar
-
yara/APT_CheshireCat.yar
-
yara/APT_Cloudduke.yar
-
yara/APT_Cobalt.yar
-
yara/APT_Codoso.yar
-
yara/APT_CrashOverride.yar
-
yara/APT_DPRK_ROKRAT.yar
-
yara/APT_DeepPanda_Anthem.yar
-
yara/APT_DeputyDog.yar
-
yara/APT_Derusbi.yar
-
yara/APT_Dubnium.yar
-
yara/APT_Duqu2.yar
-
yara/APT_Emissary.yar
-
yara/APT_EnergeticBear_backdoored_ssh.yar
-
yara/APT_eqgrp_apr17.yar