Overview
overview
10Static
static
1123.zip
windows7-x64
1123.zip
windows10-2004-x64
1123.eml
windows7-x64
6123.eml
windows10-2004-x64
3PURCHASE O...44.rar
windows7-x64
3PURCHASE O...44.rar
windows10-2004-x64
3Swift.exe
windows7-x64
10Swift.exe
windows10-2004-x64
10email-html-1.html
windows7-x64
1email-html-1.html
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
123.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
123.zip
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
123.eml
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
123.eml
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
PURCHASE ORDER INQUIRY DB PO_#33344.rar
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
PURCHASE ORDER INQUIRY DB PO_#33344.rar
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
Swift.exe
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
Swift.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
email-html-1.html
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
email-html-1.html
Resource
win10v2004-20220812-en
General
-
Target
FW RE INC000094999781 Offense #126930 FireEye Retroactive alert detection.msg
-
Size
63KB
-
MD5
706ae631637a36f371124299561900c6
-
SHA1
9d8c6fc4476d9fc0aa4b963668d94908397a8840
-
SHA256
6bb433775d62ea77cb78f96db1afd0957c531805dbb26c4cd020fd39b58e623f
-
SHA512
d7af8740f457aa95e659f3abea35e217499a5ea4275f030b32046d2b20ae8ebd951f487b3cb1e026269ec148abeed2f286c0c13ce7e8bb4e88138fcd7a25a9b1
-
SSDEEP
768:RQjtzKM4dfpOoe+7YDPgo/pLCVM8xEa8pLRG+SADS6eawuIe6thzuKDdk9z8+lId:5woFYDV8xEDLRdS6ewqhqKdk9JT6
Malware Config
Signatures
Files
-
FW RE INC000094999781 Offense #126930 FireEye Retroactive alert detection.msg.msg
-
123.zip.zip
-
123.unknown.eml
-
PURCHASE ORDER INQUIRY DB PO_#33344.r00.rar
-
Swift.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
email-html-1.txt.html