Overview
overview
8Static
static
Sprawls.cmd
windows7-x64
1Sprawls.cmd
windows10-2004-x64
8Unpreposse...re.wsf
windows7-x64
8Unpreposse...re.wsf
windows10-2004-x64
8Unpreposse...ty.jpg
windows7-x64
3Unpreposse...ty.jpg
windows10-2004-x64
3semihonorS...ng.cmd
windows7-x64
1semihonorS...ng.cmd
windows10-2004-x64
8semihonorS...th.jpg
windows7-x64
3semihonorS...th.jpg
windows10-2004-x64
3semihonorS...ck.jpg
windows7-x64
3semihonorS...ck.jpg
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Sprawls.cmd
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Sprawls.cmd
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
UnprepossessedRockeries/Outscout/OvervehemenceSeparatrices/CoffeaReaspire.wsf
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
UnprepossessedRockeries/Outscout/OvervehemenceSeparatrices/CoffeaReaspire.wsf
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
UnprepossessedRockeries/Outscout/OvervehemenceSeparatrices/DisexcommunicateZonality.jpg
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
UnprepossessedRockeries/Outscout/OvervehemenceSeparatrices/DisexcommunicateZonality.jpg
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
semihonorSpeculated/CommercerMisbestowing.cmd
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
semihonorSpeculated/CommercerMisbestowing.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
semihonorSpeculated/Pharmacosiderite/Discamp/Sawsmith.jpg
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
semihonorSpeculated/Pharmacosiderite/Discamp/Sawsmith.jpg
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
semihonorSpeculated/manypliesGreenback.jpg
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
semihonorSpeculated/manypliesGreenback.jpg
Resource
win10v2004-20220812-en
General
-
Target
Ellenyard.iso
-
Size
3.8MB
-
MD5
a5072bc33f76c2da0e7cbb775bab63ba
-
SHA1
7ad1760e150370f17b5419e8dc9a172540359fee
-
SHA256
f28f389ac0824bee4f8747c853e85a78c3c8ee5f07098d49a6528ab40005abe1
-
SHA512
c082c49ba7c29194c9dd0490f52213efc935e5e97509b6aeec35a2e3147231ec6517eefa29adf0207359d74f0f059786309371202364dc67ae0c120fd90015b9
-
SSDEEP
49152:ffFm4xXXqV/LURRrxxF1MptNHWUDRm+wl40tGKpXN707cQ3c+kL0x:+
Malware Config
Signatures
Files
-
Ellenyard.iso.iso .vbs
-
Sprawls.cmd.cmd .vbs
-
UnprepossessedRockeries/Outscout/OvervehemenceSeparatrices/CoffeaReaspire.wsf.wsf
-
UnprepossessedRockeries/Outscout/OvervehemenceSeparatrices/DisexcommunicateZonality.jpeg.jpg
-
UnprepossessedRockeries/Outscout/OvervehemenceSeparatrices/comfortfulMirbane
-
gagger/citrininSaccadge/Experimentor.dat
-
semihonorSpeculated/CommercerMisbestowing.cmd.cmd .vbs
-
semihonorSpeculated/MiserismCoalier.txt
-
semihonorSpeculated/Pharmacosiderite/Discamp/Sawsmith.jpeg.jpg
-
semihonorSpeculated/Pharmacosiderite/Explorator.data
-
semihonorSpeculated/manypliesGreenback.jpeg.jpg