KM-532WP[.]iso | Triage™

Login
Reports

Overview

overview

Static

static

WP.vbs

windows7-x64

WP.vbs

windows10-2004-x64

metaphysic...ia.vbs

windows7-x64

3

metaphysic...ia.vbs

windows10-2004-x64

7

metaphysic...er.ps1

windows7-x64

1

metaphysic...er.ps1

windows10-2004-x64

1

Resubmissions

09/12/2022, 21:32

221209-1dzx8aed6610

01/12/2022, 10:29

221201-mh924add2110

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

WP.vbs

Resource

win7-20220812-en

windows7-x64

10 signatures

600 seconds

qakbot obama224 1669794048 banker stealer trojan

Behavioral task

behavioral2

Sample

WP.vbs

Resource

win10v2004-20220812-en

windows10-2004-x64

8 signatures

600 seconds

qakbot obama224 1669794048 banker stealer trojan

Behavioral task

behavioral3

Sample

metaphysic/crematoria.vbs

Resource

win7-20220812-en

windows7-x64

4 signatures

600 seconds

Behavioral task

behavioral4

Sample

metaphysic/crematoria.vbs

Resource

win10v2004-20221111-en

windows10-2004-x64

5 signatures

600 seconds

Behavioral task

behavioral5

Sample

metaphysic/leveler.ps1

Resource

win7-20221111-en

windows7-x64

3 signatures

600 seconds

Behavioral task

behavioral6

Sample

metaphysic/leveler.ps1

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

600 seconds

General

Target
KM-532WP.iso
Size 101.2MB
Sample221209-1dzx8aed66
SHA256 deafc124bc097312f31fa48c677945da35e1d2833cd014723fb7b29f92b4c8db
MD5 4de734650352d165fc8aa24e84747409
SHA1 a727847c0286cd092293e09a5a966a2eff7f2222
SHA512 f71a91e711c1e0cd78cb6dac4e5af2f44fad1ccaf13e9a48d39f0dbf14e52c0d7b44b63505ce38be61190b298be38c69798151c953dfd1b3b5fd5dbf4c59a1e8
SSDEEP 24576:TFolOZ7iw/VwfHH3vwLwZ0RV9Z0OEdMd0z52kqAaBJP8fnLJ518VCqoI2ytHE:TFolOZ7iw/VwfHH3vwLwYuDHAHE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

KM-532WP.iso

.iso 101.2MB
WP.vbs

.vbs 181B
header

100.0MB
metaphysic/choked.txt

221KB
metaphysic/crematoria.vbs

.vbs 181B
metaphysic/imprints.gif

24KB
metaphysic/leveler.ps1

.ps1 363B
metaphysic/preyed.txt

85KB
metaphysic/readme.txt

770KB
metaphysic/simmers.jpg

.jpg 21KB
metaphysic/typewrite.png

.png 43KB

KM-532WP.iso

SHA256 deafc124bc097312f31fa48c677945da35e1d2833cd014723fb7b29f92b4c8db
MD5 4de734650352d165fc8aa24e84747409
SHA1 a727847c0286cd092293e09a5a966a2eff7f2222
SHA512 f71a91e711c1e0cd78cb6dac4e5af2f44fad1ccaf13e9a48d39f0dbf14e52c0d7b44b63505ce38be61190b298be38c69798151c953dfd1b3b5fd5dbf4c59a1e8
SSDEEP 24576:TFolOZ7iw/VwfHH3vwLwZ0RV9Z0OEdMd0z52kqAaBJP8fnLJ518VCqoI2ytHE:TFolOZ7iw/VwfHH3vwLwYuDHAHE
MD5 SHA1 SHA512 SSDEEP

WP.vbs

SHA256 6176a28d3c16b51c41d9b81b625423fe0d3c0addc6a8e32613ca7e10d540d990
MD5 bbaffbb5d8288a9481f38b8a56aa0154
SHA1 ea95bc5e3125049f06859eff5ce2d8fbc9bbc62a
SHA512 2dfa07c8f935f252f2ef100ecb4fea0a0d299092e348f1933d72067d671eb607cfde8a2a61411cbf056f01412ef1c3c46811472bff3c76d60b4bdd963c7ccd69
MD5 SHA1 SHA512

header

SHA256 cd1f2a4b7893d1c70893ed2ba347e140d34bdcd2794097424083d9367fa5caa6
MD5 5937fb14ca678edd47fca8acbf0f12d0
SHA1 c1ff9be307e47212d858e3bd534a32e94eba0d75
SHA512 b552f74ee4dc974b9f42feeb7a97a70c7c3bb94817478c571195d6d91156ea7d4d90a426df0fef975c91a549b19763c3a7a87c0a564a11cabc95630ebaf9ff09
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

metaphysic/choked.txt

SHA256 1db1054fbc2158fd8fc73cf92f03d9816d48fc92a5023164c52bea820f71199d
MD5 c6a3f23a15df0367b84fb3233673e85c
SHA1 3e86493470835ba04db6ccadb77e37bae422fba5
SHA512 e578dbfe8b7bf719897664f65d28b9fc0461bdab754e665202d48d6e0f3237fec80a908344b22326459f36880dbc0bd25c6b3124f6a7adc26880f2659479f99b
SSDEEP 3072:XoCkLSl+AMwmeG68MgWMNftCtMiv07iXQQk5:4FulJNxT8RWkf8bv07iw5
MD5 SHA1 SHA512 SSDEEP

metaphysic/crematoria.vbs

SHA256 6176a28d3c16b51c41d9b81b625423fe0d3c0addc6a8e32613ca7e10d540d990
MD5 bbaffbb5d8288a9481f38b8a56aa0154
SHA1 ea95bc5e3125049f06859eff5ce2d8fbc9bbc62a
SHA512 2dfa07c8f935f252f2ef100ecb4fea0a0d299092e348f1933d72067d671eb607cfde8a2a61411cbf056f01412ef1c3c46811472bff3c76d60b4bdd963c7ccd69
MD5 SHA1 SHA512

metaphysic/imprints.gif

SHA256 32a6cc08ba7a30f462b37a8dc7f71ec0b40318379040fac318dd3a6d43ef9a17
MD5 45a891a5bbc4c25a91a77a06d065ff84
SHA1 831e6c38e6153f269cbde79d83ba6765421a9ea2
SHA512 1287d8c542b45afaf3be53ec6fe00ac1c0c4f1af7a5d95e824afcabf842a7bdbaa2bf86468023c6640f43357a24066f352d24557a7058f943a513f25f7415e89
SSDEEP 768:vtqRNUQeWOtaMK7MpIIfTgVCQaDbqKab/iLylG:vE8Qeztan7kBTgVC07WLyw
MD5 SHA1 SHA512 SSDEEP

metaphysic/leveler.ps1

SHA256 2d25b2ee5fc13b485abd86b0b7fe90b274f1646bdaaee7ceaba4a85e49babdb1
MD5 3a09963c9181f0f542ba74c629862ef8
SHA1 4c4e93f77c591590c049e5f275c088b3edd3c6bf
SHA512 2ae4bedea2b124e8cc66835eb1dd43f8141495888f6a50f7e1ec05611807aa1d7de5f4f23f1c99f7d94f21ddc9a873567173f4f54af4c57b1ed1582c56b3d85a
MD5 SHA1 SHA512

metaphysic/preyed.txt

SHA256 59220a25e69e43f4af5aa414c5754b1991c2057ce54a8f6642488e3ab7e45738
MD5 7741772d4a072119b308a292db71fba3
SHA1 d93d3aa15fbc1031a6c6cf267243cfeb55e43ef3
SHA512 6235ada0fbf49f004956dcd7e976b78db2beef51b3944b9fd2958d6d7731a6d0c98b7b91586a5b43196e755952596683f4c88eccda7509d0c6445030fd5ffa92
SSDEEP 1536:xATNwiDtQlNHHoA1Zc/uo64E5clp1ZOVqqXwp17wiHj/t/cW1ZOViL:GwCtQzHHL1ZDaE5cv1ZOPwLwWj/t/V1X
MD5 SHA1 SHA512 SSDEEP

metaphysic/readme.txt

SHA256 3b34e8cbf2681f25d41dd86d4650b9be53a38074e9cf4f7945e070fbc4e4bb56
MD5 67661832369b7963723323666a792e65
SHA1 0afecfac4bcdd3faf7ffcc5eeda25cd99e828152
SHA512 1f8ddd42afbd83686ca61d4e367682c92661a5e200cce7c1223d08133d5c942117beaab18eb06ec263f9c9d151407cc255c3e1115c4c2425b87f558202225be0
SSDEEP 24576:+0RV9Z0OEdMd0z52kqAaBJP8fnLJ518VCqoI2yO:NuDHh
MD5 SHA1 SHA512 SSDEEP

metaphysic/simmers.jpg

SHA256 e4ff759593a61c06548eae5faf20c7d2090d70807214b1bbd381154f3d35db7e
MD5 82bee8c359156bcc35acd3b08926b9b1
SHA1 a63ca0946e30a28c120202ad6e74715dee64d897
SHA512 2887d2156e39d8f9f328165453894e72d79ce6767f947a0c60b14bcc3d36db76cec568c648e1d1f101ef53ab55e1be78025a932bfe6c38e2ff07c538d8ae3bb6
SSDEEP 384:LZwSODsVmwh2SFoXvNZPvczbwFOJhl6nT0A1nmMtEgeAix1c72yjeDXOIJ+CwcJI:LZwbDsV/clZqpP6nTtnH/nIoP+XOA+C2
MD5 SHA1 SHA512 SSDEEP

metaphysic/typewrite.png

SHA256 81a8fe3499c5cfc66c98b6d4935a8270eb824e1e58f60075846d49e1021c710a
MD5 5522c9e8ef8d4a5a95bb1f3d676fdc5c
SHA1 ae12bd89d36e46d1e416931d064c7b8c0867250a
SHA512 911606b88218f78b53343eea80bdde91c945fb241cecaa6b5e4991206cf966f3d479e0c3cda93734b740286946d6fe0a82f45b76937c88fc8c17a20784f75913
SSDEEP 768:t18g+tRun0DiF2ZCgX2VkNWTQHCj2qBjMTDGum2p7sc8Z/pcN7OOa48MZdX8encX:nQzICCD6NWdp4fYOBD8cDnYf
MD5 SHA1 SHA512 SSDEEP

© 2018-2026

Terms | Privacy