Static task
static1
Behavioral task
behavioral1
Sample
1e2b45c3-a76b-4547-161c-08db20be2a7d.gz
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1e2b45c3-a76b-4547-161c-08db20be2a7d.gz
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
EFT_Deposit_9857849statement.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
EFT_Deposit_9857849statement.exe
Resource
win10v2004-20230220-en
General
-
Target
1e2b45c3-a76b-4547-161c-08db20be2a7d
-
Size
426KB
-
MD5
c0efed0abcb6a6d602744f8ce601a12f
-
SHA1
fb508d1509c27d40048a32770595746eb16c29ca
-
SHA256
488410ba9d380e45cb656dfca6a1ed99ae17747838d40eee2cf36145064171d2
-
SHA512
f85fb2687d9a51955bfbef691debe808f9ac8ae9a05983e51517b16128525fd1e49c3feba8d3081cc50c0d52759c608fb72879ab8d00b09cb414c8a7ca90581d
-
SSDEEP
6144:b3nonZ5UXyXDYamqG4D2LzwwdSIKW3omphtBfAinA27t6bwpB/ix55ApL8Tx0/kR:boXXDnPXDmzBoAzAMQ9tAiQk7F
Malware Config
Signatures
Files
-
1e2b45c3-a76b-4547-161c-08db20be2a7d.gz .ps1
-
sample.eml
-
EFT_Deposit_9857849statement.img.iso
-
EFT_Deposit_9857849statement.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 678KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
email-html-2.txt
-
email-plain-1.txt