Overview
overview
6Static
static
1BORRAR COP...10.rar
windows7-x64
3BORRAR COP...10.rar
windows10-2004-x64
3BORRAR COP...un.src
windows7-x64
3BORRAR COP...un.src
windows10-2004-x64
3BORRAR COP... DJ.pg
windows7-x64
3BORRAR COP... DJ.pg
windows10-2004-x64
3BORRAR COP...e!.txt
windows7-x64
1BORRAR COP...e!.txt
windows10-2004-x64
1BORRAR COP...ri.ico
windows7-x64
1BORRAR COP...ri.ico
windows10-2004-x64
3BORRAR COP...ri.jpg
windows7-x64
1BORRAR COP...ri.jpg
windows10-2004-x64
3BORRAR COP...ri.exe
windows7-x64
1BORRAR COP...ri.exe
windows10-2004-x64
6BORRAR COP...Ori.db
windows7-x64
3BORRAR COP...Ori.db
windows10-2004-x64
3BORRAR COP...ri.jpg
windows7-x64
1BORRAR COP...ri.jpg
windows10-2004-x64
3BORRAR COP...areprj
windows7-x64
3BORRAR COP...areprj
windows10-2004-x64
3BORRAR COP...un.exe
windows7-x64
1BORRAR COP...un.exe
windows10-2004-x64
1BORRAR COP...un.ico
windows7-x64
1BORRAR COP...un.ico
windows10-2004-x64
3BORRAR COP...un.inf
windows7-x64
1BORRAR COP...un.inf
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
BORRAR COPIA WINDOWS 10.rar
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
BORRAR COPIA WINDOWS 10.rar
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/AutoRunSource/AutoRun.src
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/AutoRunSource/AutoRun.src
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/AutoRunSource/Black Master DJ.pg
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/AutoRunSource/Black Master DJ.pg
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/Importante!.txt
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/Importante!.txt
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Ori.ico
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Ori.ico
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Ori.jpg
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Ori.jpg
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Ori.exe
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Ori.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral15
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Ori.db
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Ori.db
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Ori.jpg
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Ori.jpg
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/autorun.areprj
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/autorun.areprj
Resource
win10v2004-20220901-en
Behavioral task
behavioral21
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/autorun.exe
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/autorun.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/autorun.ico
Resource
win7-20221111-en
Behavioral task
behavioral24
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/autorun.ico
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/autorun.inf
Resource
win7-20221111-en
Behavioral task
behavioral26
Sample
BORRAR COPIA EVALUCIÓN WINDOWS 10/autorun.inf
Resource
win10v2004-20221111-en
General
-
Target
BORRAR COPIA WINDOWS 10.rar
-
Size
1.8MB
-
MD5
825dab6495a2438b0ced457662b7c8af
-
SHA1
fcbb6207a0a96905b88e8ff254efad03d80f9a1c
-
SHA256
81c476f1f831390ace281f02874cf0597bb1cb0609931d373d502476efd75e0a
-
SHA512
1cdb89d0b280c29b2c84724b7c29476d8129a24efbbed19dab65ba2499fe5511f6079a7d612de936031724fdc45630e295501bac36bec6ad5fe089f0d07c0754
-
SSDEEP
49152:6yz2vhgQwWFhFsL4M0NySjQFmvKPNVlSIRr3N2zJT:6yapgQwihFi2FjQq8IIRrd2zJT
Malware Config
Signatures
Files
-
BORRAR COPIA WINDOWS 10.rar.rar
-
BORRAR COPIA EVALUCIÓN WINDOWS 10/AutoRunSource/AutoRun.src
-
BORRAR COPIA EVALUCIÓN WINDOWS 10/AutoRunSource/Black Master DJ.pg
-
BORRAR COPIA EVALUCIÓN WINDOWS 10/Importante!.txt
-
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Original/Yankee/Original archiver/Loopp/Nuendo/Virtual dj/593/Style/ANDY.ico
-
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Original/Yankee/Original archiver/Loopp/Nuendo/Virtual dj/593/Style/ANDYC.jpg.jpg
-
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Original/Yankee/Original archiver/Loopp/Nuendo/Virtual dj/593/Style/Programer/Andy Activador.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Original/Yankee/Original archiver/Loopp/Nuendo/Virtual dj/593/Style/Thumbs.db
-
BORRAR COPIA EVALUCIÓN WINDOWS 10/Local Page/Logan Excel/Encoder/System/Base Dates/Power Engine/Original/Yankee/Original archiver/Loopp/Nuendo/Virtual dj/593/Style/paisaje.jpg.jpg
-
BORRAR COPIA EVALUCIÓN WINDOWS 10/autorun.areprj
-
BORRAR COPIA EVALUCIÓN WINDOWS 10/autorun.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 589KB - Virtual size: 589KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
BORRAR COPIA EVALUCIÓN WINDOWS 10/autorun.ico
-
BORRAR COPIA EVALUCIÓN WINDOWS 10/autorun.inf