Overview
overview
10Static
static
1Setup.7z
windows7-x64
3Setup.7z
windows10-2004-x64
3Setup/Application.exe
windows7-x64
10Setup/Application.exe
windows10-2004-x64
10Setup/Locales/ca.pak
windows7-x64
3Setup/Locales/ca.pak
windows10-2004-x64
3Setup/Locales/cs.pak
windows7-x64
3Setup/Locales/cs.pak
windows10-2004-x64
3Setup/Locales/da.pak
windows7-x64
3Setup/Locales/da.pak
windows10-2004-x64
3Setup/Locales/de.pak
windows7-x64
3Setup/Locales/de.pak
windows10-2004-x64
3Setup/Loca...GB.pak
windows7-x64
3Setup/Loca...GB.pak
windows10-2004-x64
3Setup/Loca...US.pak
windows7-x64
3Setup/Loca...US.pak
windows10-2004-x64
3Setup/Loca...19.pak
windows7-x64
3Setup/Loca...19.pak
windows10-2004-x64
3Setup/Locales/es.pak
windows7-x64
3Setup/Locales/es.pak
windows10-2004-x64
3Setup/Locales/et.pak
windows7-x64
3Setup/Locales/et.pak
windows10-2004-x64
3Setup/Locales/fi.pak
windows7-x64
3Setup/Locales/fi.pak
windows10-2004-x64
3Setup/Locales/fil.pak
windows7-x64
3Setup/Locales/fil.pak
windows10-2004-x64
3Setup/Locales/fr.pak
windows7-x64
3Setup/Locales/fr.pak
windows10-2004-x64
3Setup/Locales/he.pak
windows7-x64
3Setup/Locales/he.pak
windows10-2004-x64
3Setup/Locales/hr.pak
windows7-x64
3Setup/Locales/hr.pak
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Setup.7z
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Setup.7z
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Setup/Application.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Setup/Application.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
Setup/Locales/ca.pak
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
Setup/Locales/ca.pak
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
Setup/Locales/cs.pak
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
Setup/Locales/cs.pak
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
Setup/Locales/da.pak
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
Setup/Locales/da.pak
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
Setup/Locales/de.pak
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
Setup/Locales/de.pak
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
Setup/Locales/en-GB.pak
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
Setup/Locales/en-GB.pak
Resource
win10v2004-20220901-en
Behavioral task
behavioral15
Sample
Setup/Locales/en-US.pak
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
Setup/Locales/en-US.pak
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
Setup/Locales/es-419.pak
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
Setup/Locales/es-419.pak
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
Setup/Locales/es.pak
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
Setup/Locales/es.pak
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
Setup/Locales/et.pak
Resource
win7-20220901-en
Behavioral task
behavioral22
Sample
Setup/Locales/et.pak
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
Setup/Locales/fi.pak
Resource
win7-20221111-en
Behavioral task
behavioral24
Sample
Setup/Locales/fi.pak
Resource
win10v2004-20221111-en
Behavioral task
behavioral25
Sample
Setup/Locales/fil.pak
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
Setup/Locales/fil.pak
Resource
win10v2004-20221111-en
Behavioral task
behavioral27
Sample
Setup/Locales/fr.pak
Resource
win7-20220901-en
Behavioral task
behavioral28
Sample
Setup/Locales/fr.pak
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
Setup/Locales/he.pak
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
Setup/Locales/he.pak
Resource
win10v2004-20221111-en
Behavioral task
behavioral31
Sample
Setup/Locales/hr.pak
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
Setup/Locales/hr.pak
Resource
win10v2004-20221111-en
General
-
Target
Setup.rar
-
Size
6.7MB
-
MD5
fcedea00be689e2af3ae1043242e5077
-
SHA1
db509baceeb7610c165b4d5042bb7ea562eb1620
-
SHA256
eb4a7d75e1661dc1d9e158317a788eaf1c280da115c0c78662d0cba514b1e59b
-
SHA512
3d4578cb24e5abc9959c2579c3b405358e7e7a664d418ccd844fce7af8a6f1bbd6cfd9cce69a0e43c0513e7cfc2c8f545a1545ea425595377534dae840b13656
-
SSDEEP
196608:PYWdEDom53foHJix3r7ZVVwkNynwYWdElomWmfoH39ZVdwkx:PYXv1f+ox3rVjRDYXl5f+3zrRx
Malware Config
Signatures
Files
-
Setup.rar.7z
-
Setup/Additional File/el.pak
-
Setup/Additional File/en-GB.pak
-
Setup/Additional File/en-US.pak
-
Setup/Additional File/es-419.pak
-
Setup/Additional File/es.pak
-
Setup/Additional File/et.pak
-
Setup/Additional File/fa.pak
-
Setup/Additional File/fi.pak
-
Setup/Additional File/fil.pak
-
Setup/Additional File/fr.pak
-
Setup/Additional File/gu.pak
-
Setup/Additional File/he.pak
-
Setup/Additional File/hi.pak
-
Setup/Additional File/hr.pak
-
Setup/Additional File/hu.pak
-
Setup/Additional File/id.pak
-
Setup/Additional File/it.pak
-
Setup/Additional File/ja.pak
-
Setup/Additional File/kn.pak
-
Setup/Additional File/ko.pak
-
Setup/Additional File/lt.pak
-
Setup/Additional File/lv.pak
-
Setup/Additional File/ml.pak
-
Setup/Additional File/mr.pak
-
Setup/Additional File/ms.pak
-
Setup/Additional File/nb.pak
-
Setup/Additional File/nl.pak
-
Setup/Additional File/pl.pak
-
Setup/Additional File/pt-BR.pak
-
Setup/Additional File/pt-PT.pak
-
Setup/Additional File/ro.pak
-
Setup/Additional File/ru.pak
-
Setup/Additional File/sk.pak
-
Setup/Additional File/sl.pak
-
Setup/Additional File/sr.pak
-
Setup/Additional File/sv.pak
-
Setup/Additional File/sw.pak
-
Setup/Additional File/ta.pak
-
Setup/Additional File/te.pak
-
Setup/Additional File/th.pak
-
Setup/Additional File/tr.pak
-
Setup/Additional File/uk.pak
-
Setup/Additional File/vi.pak
-
Setup/Additional File/zh-CN.pak
-
Setup/Additional File/zh-TW.pak
-
Setup/Application.exe.exe windows x86
f56130a002be4d36c5e35790a357b9ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetThreadPriority
GetProcessHeap
GetModuleHandleA
GetProcAddress
FreeConsole
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
WriteConsoleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetFileType
GetStringTypeW
CompareStringW
LCMapStringW
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
DecodePointer
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 367KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. q7 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
-
Setup/Locales/ca.pak
-
Setup/Locales/cs.pak
-
Setup/Locales/da.pak
-
Setup/Locales/de.pak
-
Setup/Locales/en-GB.pak
-
Setup/Locales/en-US.pak
-
Setup/Locales/es-419.pak
-
Setup/Locales/es.pak
-
Setup/Locales/et.pak
-
Setup/Locales/fi.pak
-
Setup/Locales/fil.pak
-
Setup/Locales/fr.pak
-
Setup/Locales/he.pak
-
Setup/Locales/hr.pak
-
Setup/Locales/hu.pak
-
Setup/Locales/id.pak
-
Setup/Locales/it.pak
-
Setup/Locales/ja.pak
-
Setup/Locales/ko.pak
-
Setup/Locales/lt.pak
-
Setup/Locales/lv.pak
-
Setup/Locales/ms.pak
-
Setup/Locales/nb.pak
-
Setup/Locales/nl.pak
-
Setup/Locales/pl.pak
-
Setup/Locales/pt-BR.pak
-
Setup/Locales/pt-PT.pak
-
Setup/Locales/ro.pak
-
Setup/Locales/sk.pak
-
Setup/Locales/sl.pak
-
Setup/Locales/sv.pak
-
Setup/Locales/sw.pak
-
Setup/Locales/tr.pak
-
Setup/Locales/vi.pak
-
Setup/Locales/zh-CN.pak
-
Setup/Locales/zh-TW.pak
-
Setup/New Text Document.txt
-
Setup/bin.dll
-
Setup/file.dll