Overview
overview
10Static
static
AFL27.iso
windows7-x64
3AFL27.iso
windows10-2004-x64
3AS.js
windows7-x64
10AS.js
windows10-2004-x64
10peseta/data.txt
windows7-x64
1peseta/data.txt
windows10-2004-x64
1peseta/flours.js
windows7-x64
3peseta/flours.js
windows10-2004-x64
7peseta/gratiae.ps1
windows7-x64
1peseta/gratiae.ps1
windows10-2004-x64
1peseta/opalescent.jpg
windows7-x64
3peseta/opalescent.jpg
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
AFL27.iso
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
AFL27.iso
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
AS.js
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
AS.js
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
peseta/data.txt
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
peseta/data.txt
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
peseta/flours.js
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
peseta/flours.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
peseta/gratiae.ps1
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
peseta/gratiae.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
peseta/opalescent.jpg
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
peseta/opalescent.jpg
Resource
win10v2004-20221111-en
General
-
Target
7d1d7d196b3932e4e3e7cc1159f0e3ebab252f6a5f1ed6000f78d2133052a0de.zip
-
Size
425KB
-
MD5
2f9b738e456b19003247e663755a4dc4
-
SHA1
4c5a0cff232b4a484a6e67ec8f16cbb7a5a1ab60
-
SHA256
a4020391b5400315217782b3bfeb4b5c475369bb6950548d09aafd48558edf2d
-
SHA512
9ba2f60866ff685dce33fcb945fd4d8aa1aeec69ec06da2d878f9e22c654371928bd660dafa9e95560bf5ecc9dcd22f26a3c96eac13847cf9bfa4ef99a3e4c4e
-
SSDEEP
12288:XNBsR1wGXZGUOWnZdY1cex4x82mMdQHIcjh:9GAWZGqZdYNCx8EQHBjh
Malware Config
Signatures
Files
-
7d1d7d196b3932e4e3e7cc1159f0e3ebab252f6a5f1ed6000f78d2133052a0de.zip.zip
Password: infected
-
7d1d7d196b3932e4e3e7cc1159f0e3ebab252f6a5f1ed6000f78d2133052a0de.zip.zip
Password: P32M
-
AFL27.iso.iso .vbs
Password: P32M
-
AS.js.js .vbs
-
peseta/data.txt
-
peseta/flours.js.js .vbs
-
peseta/gratiae.ps1.ps1
-
peseta/opalescent.jpg.jpg