Overview
overview
5Static
static
Full&FInal...es.rar
windows7-x64
1Full&FInal...es.rar
windows10-2004-x64
11Setup.exe
windows7-x64
31Setup.exe
windows10-2004-x64
5Langs/Cr0atian.ini
windows7-x64
1Langs/Cr0atian.ini
windows10-2004-x64
1Langs/Danish.ini
windows7-x64
1Langs/Danish.ini
windows10-2004-x64
1Langs/English.ini
windows7-x64
1Langs/English.ini
windows10-2004-x64
1Langs/Finnish.ini
windows7-x64
1Langs/Finnish.ini
windows10-2004-x64
1Langs/Hebrew.ini
windows7-x64
1Langs/Hebrew.ini
windows10-2004-x64
1Langs/Hungarian.ps1
windows7-x64
1Langs/Hungarian.ps1
windows10-2004-x64
1Langs/Ind0nesian.ini
windows7-x64
1Langs/Ind0nesian.ini
windows10-2004-x64
1Langs/Japanese.ini
windows7-x64
1Langs/Japanese.ini
windows10-2004-x64
1Langs/Kazakh.ini
windows7-x64
1Langs/Kazakh.ini
windows10-2004-x64
1Langs/Korean.ps1
windows7-x64
1Langs/Korean.ps1
windows10-2004-x64
1Langs/Kurdish.ini
windows7-x64
1Langs/Kurdish.ini
windows10-2004-x64
1Langs/Norwegian.ini
windows7-x64
1Langs/Norwegian.ini
windows10-2004-x64
1Langs/SimpChinese.ini
windows7-x64
1Langs/SimpChinese.ini
windows10-2004-x64
1Langs/Sinhala.ini
windows7-x64
1Langs/Sinhala.ini
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Full&FInal-[2022_Pasword]-ActivesFiles.rar
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Full&FInal-[2022_Pasword]-ActivesFiles.rar
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
1Setup.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
1Setup.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
Langs/Cr0atian.ini
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
Langs/Cr0atian.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
Langs/Danish.ini
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
Langs/Danish.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
Langs/English.ini
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
Langs/English.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
Langs/Finnish.ini
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
Langs/Finnish.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
Langs/Hebrew.ini
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
Langs/Hebrew.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
Langs/Hungarian.ps1
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
Langs/Hungarian.ps1
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
Langs/Ind0nesian.ini
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
Langs/Ind0nesian.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
Langs/Japanese.ini
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
Langs/Japanese.ini
Resource
win10v2004-20220901-en
Behavioral task
behavioral21
Sample
Langs/Kazakh.ini
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
Langs/Kazakh.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
Langs/Korean.ps1
Resource
win7-20221111-en
Behavioral task
behavioral24
Sample
Langs/Korean.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
Langs/Kurdish.ini
Resource
win7-20221111-en
Behavioral task
behavioral26
Sample
Langs/Kurdish.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
Langs/Norwegian.ini
Resource
win7-20220901-en
Behavioral task
behavioral28
Sample
Langs/Norwegian.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
Langs/SimpChinese.ini
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
Langs/SimpChinese.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral31
Sample
Langs/Sinhala.ini
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
Langs/Sinhala.ini
Resource
win10v2004-20221111-en
General
-
Target
Full&FInal-[2022_Pasword]-ActivesFiles.rar
-
Size
1.6MB
-
MD5
df7f3e2f31df564b231375609dfae412
-
SHA1
9132d06af2b4d4ac3ed88d500a42d2155c2b2130
-
SHA256
9d8d13de886e90b1ed9e58f8d6a6bb0b3bd452615e50105c505f80e852fa6d53
-
SHA512
3aa7123c88abc08a4527c49fb078439180a14c50b63a6ee3a9cc20317a603b1aa69ae2c8d2dbc1526896d6bf4600617fd8b81ebd4087c09b3676acdde426283f
-
SSDEEP
49152:UncMjnLJbYFxQaXhGbPNwGFAneZDu8RHkXO:UnvTLJbYFxLhGLXFd68WXO
Malware Config
Signatures
Files
-
Full&FInal-[2022_Pasword]-ActivesFiles.rar.rar
Password: 2022
-
1Setup.exe.exe windows x64
Password: 2022
Code Sign
3f:dc:7a:3e:7e:96:5e:b6:4e:3a:1a:ce:c7:32:b0:e3Certificate
IssuerCN=Logitech ZC-9015 USA State of WashingtonNot Before24/12/2022, 20:59Not After25/12/2032, 20:59SubjectCN=Logitech ZC-9015 USA State of Washington90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before11/05/2022, 00:00Not After10/08/2033, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
94:12:9d:97:b2:71:51:cd:aa:33:db:7d:62:6d:8a:3a:b7:b5:3f:b9:80:3d:30:32:5a:6e:72:6b:7e:4c:a7:25Signer
Actual PE Digest94:12:9d:97:b2:71:51:cd:aa:33:db:7d:62:6d:8a:3a:b7:b5:3f:b9:80:3d:30:32:5a:6e:72:6b:7e:4c:a7:25Digest Algorithmsha256PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Logitech ZC-9015 USA State of Washington15/12/2022, 13:51 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Langs/Cr0atian.ini
-
Langs/Danish.ini
-
Langs/English.ini
-
Langs/Finnish.ini
-
Langs/Hebrew.ini
-
Langs/Hungarian.ini.ps1
-
Langs/Ind0nesian.ini
-
Langs/Japanese.ini
-
Langs/Kazakh.ini
-
Langs/Korean.ini.ps1
-
Langs/Kurdish.ini
-
Langs/Norwegian.ini
-
Langs/SimpChinese.ini
-
Langs/Sinhala.ini
-
Langs/Sl0vak.ini
-
Langs/Swedish.ini
-
Langs/Thai.ini
-
Langs/TradChinese.ini
-
Langs/Ukrainian.ini
-
Langs/UyghurLatin.ini
-
Langs/Uzbek.ini
-
Langs/Vietnamese.ini
-
MoreInf0s.txt