Overview
overview
10Static
static
101JATLV2V.zip
windows7-x64
11JATLV2V.zip
windows10-2004-x64
1NagTracking[1].htm
windows7-x64
1NagTracking[1].htm
windows10-2004-x64
1NagTracking[2].htm
windows7-x64
1NagTracking[2].htm
windows10-2004-x64
1getipaddress[1].htm
windows7-x64
1getipaddress[1].htm
windows10-2004-x64
1handdiy_4[1].exe
windows7-x64
7handdiy_4[1].exe
windows10-2004-x64
7plus[1].htm
windows7-x64
1plus[1].htm
windows10-2004-x64
1General
-
Target
1JATLV2V.zip
-
Size
702KB
-
Sample
230214-1l7yssfh9z
-
MD5
9432576b7508d5eaca738572ab453f7e
-
SHA1
998e2447c44f0d273169c0411854ce7c36c7d249
-
SHA256
c7bb8ef7307caaf62d84ab706dfb41059ee39bc345cfc49b2b60ff70f0f4a240
-
SHA512
7e53a3f31fb06d594da153e559b686574e208d6e131a7f247941562a1e181717c1d72c1bed57ad5694daf002ce30ae9ff2bfd79c29d62d9d969ea64797061ce4
-
SSDEEP
12288:V7/hizi33/pys9MIBIGReXfLDbyjmnWjwChRHfQf9U9Shvy0xekEh:VL3/pyZPOeXfemWjX3mU9JZh
Behavioral task
behavioral1
Sample
1JATLV2V.zip
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1JATLV2V.zip
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
NagTracking[1].htm
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
NagTracking[1].htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
NagTracking[2].htm
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
NagTracking[2].htm
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
getipaddress[1].htm
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
getipaddress[1].htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
handdiy_4[1].exe
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
handdiy_4[1].exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
plus[1].htm
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
plus[1].htm
Resource
win10v2004-20220812-en
Malware Config
Extracted
socelars
https://hdbywe.s3.us-west-2.amazonaws.com/dweg26/
Targets
-
-
Target
1JATLV2V.zip
-
Size
702KB
-
MD5
9432576b7508d5eaca738572ab453f7e
-
SHA1
998e2447c44f0d273169c0411854ce7c36c7d249
-
SHA256
c7bb8ef7307caaf62d84ab706dfb41059ee39bc345cfc49b2b60ff70f0f4a240
-
SHA512
7e53a3f31fb06d594da153e559b686574e208d6e131a7f247941562a1e181717c1d72c1bed57ad5694daf002ce30ae9ff2bfd79c29d62d9d969ea64797061ce4
-
SSDEEP
12288:V7/hizi33/pys9MIBIGReXfLDbyjmnWjwChRHfQf9U9Shvy0xekEh:VL3/pyZPOeXfemWjX3mU9JZh
Score1/10 -
-
-
Target
NagTracking[1].htm
-
Size
178B
-
MD5
bd2695f4b079c71dbddde3436286fb9c
-
SHA1
733c05da132193d6cf1d8e242d12e2525c03bab4
-
SHA256
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
-
SHA512
5b73af24d095f7593026d3f211da6775d91c2efb5cdb0e0258ccca8edd3f8645cdf80d8338c863794d260f4bca08637233be3548d83e7225518dee2f47560798
Score1/10 -
-
-
Target
NagTracking[2].htm
-
Size
178B
-
MD5
bd2695f4b079c71dbddde3436286fb9c
-
SHA1
733c05da132193d6cf1d8e242d12e2525c03bab4
-
SHA256
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
-
SHA512
5b73af24d095f7593026d3f211da6775d91c2efb5cdb0e0258ccca8edd3f8645cdf80d8338c863794d260f4bca08637233be3548d83e7225518dee2f47560798
Score1/10 -
-
-
Target
getipaddress[1].htm
-
Size
178B
-
MD5
bd2695f4b079c71dbddde3436286fb9c
-
SHA1
733c05da132193d6cf1d8e242d12e2525c03bab4
-
SHA256
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
-
SHA512
5b73af24d095f7593026d3f211da6775d91c2efb5cdb0e0258ccca8edd3f8645cdf80d8338c863794d260f4bca08637233be3548d83e7225518dee2f47560798
Score1/10 -
-
-
Target
handdiy_4[1].exe
-
Size
1.4MB
-
MD5
48d5a5b590d2c7542893a54ff3b7a3f2
-
SHA1
cfe9ac380166b4e1fe0f76fb5f0438c4866c4411
-
SHA256
9afa9957656afbed14bedf108cd70765a3bec19394607f26f40dd576ca3f2518
-
SHA512
7f021b3fc9426d8c762f861837d3d721f9bc83b9ecdaa4920d8b4f3aee1e67f8ddd246c927d71b445186a33cca95f53daf9ba517bd638ce2f544860e2a8e8f05
-
SSDEEP
24576:qkcFpATU9Sz4OGu9Tcl2wkQcUJsqrN8X1B0vPXROKppgtiC:qxpjqnnZn+vPXgIpSiC
-
Legitimate hosting services abused for malware hosting/C2
-
-
-
Target
plus[1].htm
-
Size
1B
-
MD5
cfcd208495d565ef66e7dff9f98764da
-
SHA1
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
-
SHA256
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
-
SHA512
31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99
Score1/10 -