b2c1a42235871224b3afb06b931a4aa6a0d074c0953a1469bc6358cedcf75d3a.vhd
- SHA256 b2c1a42235871224b3afb06b931a4aa6a0d074c0953a1469bc6358cedcf75d3a
Static task
static1
Behavioral task
behavioral1
Sample
CX.lnk
Resource
win7-20220812-en
windows7-x64
6 signatures
600 seconds
Behavioral task
behavioral2
Sample
CX.lnk
Resource
win10v2004-20220812-en
windows10-2004-x64
6 signatures
600 seconds
Behavioral task
behavioral3
Sample
glasses/astrophysics.dll
Resource
win7-20220812-en
windows7-x64
1 signatures
600 seconds
Behavioral task
behavioral4
Sample
glasses/astrophysics.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
1 signatures
600 seconds
Behavioral task
behavioral5
Sample
glasses/caitiff.cmd
Resource
win7-20220812-en
windows7-x64
0 signatures
600 seconds
Behavioral task
behavioral6
Sample
glasses/caitiff.cmd
Resource
win10v2004-20220901-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral7
Sample
glasses/certificated.cmd
Resource
win7-20221111-en
windows7-x64
1 signatures
600 seconds
Behavioral task
behavioral8
Sample
glasses/certificated.cmd
Resource
win10v2004-20221111-en
windows10-2004-x64
1 signatures
600 seconds
General
- Target b2c1a42235871224b3afb06b931a4aa6a0d074c0953a1469bc6358cedcf75d3a.vhd
- Size 2.0MB
- Sample221205-1dpr9ahe72
- SHA256 b2c1a42235871224b3afb06b931a4aa6a0d074c0953a1469bc6358cedcf75d3a
- MD5 fd765e768b7703d955ca8073a4b82030
- SHA1 eedd6f668348f718ed2ccd8863d973ac6ce51f59
- SHA512 7ecee45612b04abaf619829ee4bb0e108752ea07ed84989fd751f92752e6324faf9a15b46d7985b661d84d3a9763d558136e4a32c3fdd25798d322bc432dbacb
- SSDEEP 12288:L+hfiNzqkalTfvvHWiYj7amQZGTcpC20ZsGOIBrupfJ:L+hnXWi+2pZG4UP6nIBrUJ
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
b2c1a42235871224b3afb06b931a4aa6a0d074c0953a1469bc6358cedcf75d3a.vhd.vhd 2.0MB
-
out.vhd.vhd 2.0MB
-
CX.lnk.lnk 1KB
-
System Volume Information/WPSettings.dat12B
-
glasses/astrophysics.tmp.dll 599KB
-
glasses/caitiff.cmd.cmd .vbs 230B
-
glasses/certificated.cmd.cmd .vbs 297B
-
glasses/headshrinkers.gif19KB
-
glasses/unmaking.txt59KB
out.vhd
- SHA256 b2c1a42235871224b3afb06b931a4aa6a0d074c0953a1469bc6358cedcf75d3a
- MD5 fd765e768b7703d955ca8073a4b82030
- SHA1 eedd6f668348f718ed2ccd8863d973ac6ce51f59
- SHA512 7ecee45612b04abaf619829ee4bb0e108752ea07ed84989fd751f92752e6324faf9a15b46d7985b661d84d3a9763d558136e4a32c3fdd25798d322bc432dbacb
- SSDEEP 12288:L+hfiNzqkalTfvvHWiYj7amQZGTcpC20ZsGOIBrupfJ:L+hnXWi+2pZG4UP6nIBrUJ
- MD5 SHA1 SHA512 SSDEEP
CX.lnk
- SHA256 3b718372bc32b024b122a866999b4a6b3e67a0efe57803417700828203f2f78a
- MD5 2cf243993914e5e59bb3f2336a1cec7e
- SHA1 7985e21c3d6426b9aa6943a5849a0c6b69bfe1ed
- SHA512 0d14ba36241244a0eb70dc52621f445f39450dec88bb4f148675e2b7b2db2870bd1ea00fe1af6fae53f6a03293fb327dbae47dc0cba58f8a906470d054398116
- MD5 SHA1 SHA512
System Volume Information/WPSettings.dat
- SHA256 820877a9cd2e08dd7e5cc105eadb50ce0d7bc74944500156c7153caa39c751ea
- MD5 a2e58e7b87b8b1d8b7d7589accd956dc
- SHA1 dc50ab5f12ef755b1908a447aa0627bc0fb61da5
- SHA512 66cb2b67f30f03d95aedacde5e9e8d6a62efecc499a3d7cada9f8f12d999dbd449941db59b54caa2db9d82237a681a2b3f942744307da78fbab99cf145de7640
- MD5 SHA1 SHA512
glasses/astrophysics.tmp
- IMPHASH c3bb3534dbef3a4399f97710833b3fca
- SHA256 22c550ddaee6ffdc3b4ab09bcc64461d444312958cd14f05178b2124de18ffa4
- MD5 8016278a2154ddd50fa719a15d93f166
- SHA1 af6b2dddaf6192ee547c783a58dc6ce49317a54d
- SHA512 7bf75b38b29a685be4fbce0700e9a22f273911eb71400de028bbf3e9e2e586c992b168bb752562b19e7373f672e31d7a42fb1735fb2ef7b02951c1f18f642faf
- SSDEEP 12288:W+hfiNzqkalTfvvHWiYj7amQZGTcpC20ZsGOIBrupfJ:W+hnXWi+2pZG4UP6nIBrUJ
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
137803
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
ExitThread
GetTickCount64
VirtualAlloc
VirtualAllocEx
GetCommandLineA
CreateDirectoryW
CreateFileA
GetFileAttributesA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetSystemInfo
GetVersion
CreateThread
GetModuleHandleA
GetModuleHandleW
LoadLibraryA
LoadLibraryW
GlobalAlloc
lstrcmpA
lstrcmpiA
lstrlenA
lstrlenW
CloseHandle
CreateFileW
SetFilePointerEx
VirtualProtect
WaitForSingleObjectEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
MultiByteToWideChar
LCMapStringW
MoveFileExW
DecodePointer
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
WriteConsoleW
advapi32
RegCloseKey
ole32
CoInitializeEx
shlwapi
PathFindOnPathA
PathFindExtensionA
PathGetDriveNumberA
ord155
StrToIntA
PathFileExistsA
PathFindSuffixArrayA
DllUnregisterServer
DrawThemeIcon
antimerina
chilver
choirlike
citharoedic
damselfish
euphuist
freethinker
hogfish
libyan
malacopterygian
meadowed
overcaring
pipilo
radiogoniometry
sensationalistic
siliquaria
skullery
strifemaker
sylvestrene
tu
uncheering
Name
.text
Size
209KB
Virtual Size
209KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
243KB
Virtual Size
243KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
127KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
glasses/caitiff.cmd
- SHA256 c29ab47a71c297c0cd9297ca77f494451134c89b8056965e3a99d2a5550103ea
- MD5 f656106936e1f45ae054b6d4dd029219
- SHA1 0e2e4d706e383dec6a2ed3ae08b8caf6a4b4f061
- SHA512 5b0817224afda6a35f75a4c8513676c23e7e3dbb455fc8089eeb10a717f8b701d2840da91b5656d3fa1a364784eff4ebc5907e51fec1b0047e8e7d91b165b1b0
- MD5 SHA1 SHA512
glasses/certificated.cmd
- SHA256 51c5b2aad08d5283ef553c4773ae9b8d26eb30ce8e6b59d7c13003f57ce7ae68
- MD5 a5d2f0ccad9c55ccc8fb24379a5c2cc8
- SHA1 c5acbaca2dc86b0779a64dd94fd83ec8d612b45d
- SHA512 01f4906bc9a1fd70333052370860828f631b1d05ad58b2815dea24363df90f2d2fbb6c285fba6f5890b5830f239291b0e32db5b99b8c839d4872a0f7fbc1cdce
- MD5 SHA1 SHA512
glasses/headshrinkers.gif
- SHA256 9f935937703692db3f186dcbd065b4802911c7308d93487b5eb509a1e031599f
- MD5 d886dff746b8601b9fd461c78c1a62db
- SHA1 49623a4e4c1d8c45d8e5f219db4bf0616a6261a0
- SHA512 718391fe39730932bebf5442ed03c65920e89ceb9657c4c4024ff16a91f6222ca7af4f97a3ef696f4f56a617ab81f868773393f04d0be84d9e88496b22ea0f11
- SSDEEP 384:TgmrLdEfKVq5b2Isa7OKl5R3ERYkihPX8I8mbXZ6nlvJ/QVJPmJqpy:TJrJE35bX/pR4zihzzjMf++Jmy
- MD5 SHA1 SHA512 SSDEEP
glasses/unmaking.txt
- SHA256 dcc9a03adb2d0d8fde5d771f9f183de52eb5475455f7c2a176c2c1790906d350
- MD5 e085732b24ca84c3e58f40b277b2e695
- SHA1 2e270d5063ff7d60e26e0ad2a7b69186f01035ef
- SHA512 98d3c9af2964caed0094c348e245b5722b33ac2bee2baa093f7cddee95a4caef28337c81bfaee1b54b7f7bb251b45b94fec47e50c3ea41aeee78365065130c7c
- SSDEEP 768:sp61ShBniWAwjA+hMyrDfnlbURoD+hHQfInTtwjA+nxIaShHQ7xIMxviUjBMMcKb:s1nrtZhMUmSEuZq2xvhB1xh
- MD5 SHA1 SHA512 SSDEEP