Overview
overview
1Static
static
1MDE_File_S...17.zip
windows7-x64
1MDE_File_S...17.zip
windows10-2004-x64
1Download-S...in.zip
windows7-x64
1Download-S...in.zip
windows10-2004-x64
1Download-S...14.zip
windows7-x64
1Download-S...14.zip
windows10-2004-x64
1run-ryr.dll
windows7-x64
1run-ryr.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
MDE_File_Sample_46e61f1223e9d32122dd447e9b20cbc3ad208517.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
MDE_File_Sample_46e61f1223e9d32122dd447e9b20cbc3ad208517.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Download-Setup-57-main.zip
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Download-Setup-57-main.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Download-Setup-57-main/sfx_123_414.zip
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Download-Setup-57-main/sfx_123_414.zip
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
run-ryr.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
run-ryr.dll
Resource
win10v2004-20230220-en
General
-
Target
MDE_File_Sample_46e61f1223e9d32122dd447e9b20cbc3ad208517.zip
-
Size
1.1MB
-
MD5
b36df8dfd7fdb1292624ed9e4acf91db
-
SHA1
7b748d499f3d0f589538106afcae74703c6453e2
-
SHA256
569af6723e41444a91fd5a17355204d42963d309b25dbe57e59c0bdd7a11c7b8
-
SHA512
46cacbb58236d80dfcac774801ed527d94d6dcb45c8caaf5e2f70fc4f7dd5076a42a0df66cbac1ea240560da14555f9543aa1472796cbbedf97efd6a1ef38aa0
-
SSDEEP
24576:tm7knKGD2HBwnAsSLEw32GpzYmcKKwQSeG9Ksa7IMwU+:Ei0unAscZ5YXlSFzA0
Malware Config
Signatures
Files
-
MDE_File_Sample_46e61f1223e9d32122dd447e9b20cbc3ad208517.zip.zip
Password: ssam
-
Download-Setup-57-main.zip.zip
Password: ssam
-
Download-Setup-57-main/sfx_123_414.zip.zip
Password: ssam
-
run-ryr.cpl.dll windows x86
Password: ssam
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 253KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1016KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 442B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.ooiojf Size: 680.4MB - Virtual size: 680.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ