Overview
overview
8Static
static
Nonactives...ae.cmd
windows10-1703-x64
1Witcheries...hmatic
windows10-1703-x64
1Witcheries...ck.wsf
windows10-1703-x64
8Witcheries...rm.jpg
windows10-1703-x64
3Witcheries...ed.cmd
windows10-1703-x64
1Witcheries...ze.dat
windows10-1703-x64
3Witcheries...onites
windows10-1703-x64
1Witcheries...ly.png
windows10-1703-x64
3papistical...ttered
windows10-1703-x64
1papistical...le.png
windows10-1703-x64
3Static task
static1
Behavioral task
behavioral1
Sample
NonactivesPapilioninae.cmd
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
Witcheries/UnestimatedAsthmatic
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
Witcheries/XenodochiaCammock.wsf
Resource
win10-20220812-en
Behavioral task
behavioral4
Sample
Witcheries/ingeneratingAscensor/ChieftainessAmpulliform.jpg
Resource
win10-20220812-en
Behavioral task
behavioral5
Sample
Witcheries/ingeneratingAscensor/GremlinCoveys/BambiniStooped.cmd
Resource
win10-20220901-en
Behavioral task
behavioral6
Sample
Witcheries/ingeneratingAscensor/GremlinCoveys/PentamerusMinienize.dat
Resource
win10-20220812-en
Behavioral task
behavioral7
Sample
Witcheries/ingeneratingAscensor/Limonites
Resource
win10-20220812-en
Behavioral task
behavioral8
Sample
Witcheries/ingeneratingAscensor/triplicitiesForgiveably.png
Resource
win10-20220901-en
Behavioral task
behavioral9
Sample
papisticalHyperdiabolically/angiomyocardiacEnfettered
Resource
win10-20220812-en
Behavioral task
behavioral10
Sample
papisticalHyperdiabolically/dispurseInaidable.png
Resource
win10-20220812-en
General
-
Target
transmigrativeLampwick.zip
-
Size
2.9MB
-
MD5
a5b912aaa9e7183d95a49e578fb2eaa4
-
SHA1
af849a8d959005274d056dfb5fa71516dbe03009
-
SHA256
bca72ccd090de004d2107cf7287d029441bf991a2a34c0834564c0580948653e
-
SHA512
1bd518ec1ae88e37d9482133ea773b12023dc9683c6d543b358a1c09ee58a3aabc326a9b78614f8f941cf2df2dc3f27fa403f1c53e78530c914cf2519935c3ce
-
SSDEEP
49152:Y6xeJiQigiaaeUnKApeHhTie2CA38K9Jp4rM98kxgTq7nsLJvDJuPVwXegYQ23JP:YH72aaBnpeHI3f9P4rM98kxV7Alpeg6V
Malware Config
Signatures
Files
-
transmigrativeLampwick.zip.zip
Password: B1
-
transmigrativeLampwick.iso.iso .vbs
Password: B1
-
NonactivesPapilioninae.cmd.cmd .vbs
-
Witcheries/UnestimatedAsthmatic
-
Witcheries/XenodochiaCammock.wsf.wsf
-
Witcheries/ingeneratingAscensor/ChieftainessAmpulliform.jpg.jpg
-
Witcheries/ingeneratingAscensor/GremlinCoveys/BambiniStooped.cmd.cmd .vbs
-
Witcheries/ingeneratingAscensor/GremlinCoveys/PentamerusMinienize.dat
-
Witcheries/ingeneratingAscensor/Limonites
-
Witcheries/ingeneratingAscensor/triplicitiesForgiveably.png.png
-
papisticalHyperdiabolically/angiomyocardiacEnfettered
-
papisticalHyperdiabolically/dispurseInaidable.png.png