Overview
overview
6Static
static
1guis/ctfsc...rd.vbs
windows7-x64
6guis/ctfsc...rd.vbs
windows10-2004-x64
1guis/doors...or.vbs
windows7-x64
1guis/doors...or.vbs
windows10-2004-x64
1guis/erebu...er.vbs
windows7-x64
1guis/erebu...er.vbs
windows10-2004-x64
1guis/hud.vbs
windows7-x64
1guis/hud.vbs
windows10-2004-x64
1guis/mainmenu.vbs
windows7-x64
1guis/mainmenu.vbs
windows10-2004-x64
1guis/mphud.vbs
windows7-x64
1guis/mphud.vbs
windows10-2004-x64
1guis/mpmain.vbs
windows7-x64
1guis/mpmain.vbs
windows10-2004-x64
1guis/pda-weapons.vbs
windows7-x64
1guis/pda-weapons.vbs
windows10-2004-x64
1guis/pda.vbs
windows7-x64
1guis/pda.vbs
windows10-2004-x64
1guis/phobo...ar.vbs
windows7-x64
1guis/phobo...ar.vbs
windows10-2004-x64
1guis/phobo...ng.vbs
windows7-x64
1guis/phobo...ng.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
guis/ctfscoreboard.vbs
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
guis/ctfscoreboard.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
guis/doors/pda_door.vbs
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
guis/doors/pda_door.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
guis/erebus2/e2_pda_ladder.vbs
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
guis/erebus2/e2_pda_ladder.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
guis/hud.vbs
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
guis/hud.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
guis/mainmenu.vbs
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
guis/mainmenu.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
guis/mphud.vbs
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
guis/mphud.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
guis/mpmain.vbs
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
guis/mpmain.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
guis/pda-weapons.vbs
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
guis/pda-weapons.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
guis/pda.vbs
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
guis/pda.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
guis/phobos1/p1_allclear.vbs
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
guis/phobos1/p1_allclear.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
guis/phobos4/p4_warning.vbs
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
guis/phobos4/p4_warning.vbs
Resource
win10v2004-20230221-en
General
-
Target
doom3EX-ROE_Por_buri18.rar
-
Size
7.6MB
-
MD5
2362a272e0809421899c5353bc8af636
-
SHA1
1da82c93633a590cba186b759d80b823579693f2
-
SHA256
861dd73f2bbafab43d9945cb93d1ca10b7b08d239f4707d81f928a0b9bf79356
-
SHA512
16e14caa11f5a6f4cf47eb0b87628dadfc499dece7da600f5cc4516891ce523a860a45819cd1cdeb2393166055bfebbe63254a08e95f32f8db15f214ac57720e
-
SSDEEP
196608:JRaGSQzvGB2IT8fVl2rkYgA7z5Tby2vye3odX:J7SQzxIql2TRte8E
Malware Config
Signatures
Files
-
doom3EX-ROE_Por_buri18.rar.rar
-
doom3EX-ROE Por buri18/DoomConfig.cfg
-
doom3EX-ROE Por buri18/LEEME.txt
-
doom3EX-ROE Por buri18/zpak100.pk4.zip
-
default.cfg
-
guis/GameBearShoot.gui
-
guis/GameBustOut.gui
-
guis/ctfscoreboard.gui.vbs
-
guis/d3xp-weaponconfig.pd
-
guis/d3xp_marquee.gui
-
guis/doors/liftcallscript.gui
-
guis/doors/pda_door.gui.vbs
-
guis/erebus2/e2_cavelift2.gui
-
guis/erebus2/e2_pda_ladder.gui.vbs
-
guis/erebus3/artifact.gui
-
guis/erebus4/bridge_open.gui
-
guis/erebus4/e4_bridge_release.gui
-
guis/erebus6/erebus6_monorail.gui
-
guis/hud.gui.vbs
-
guis/intro.gui
-
guis/mainmenu.gui.vbs
-
guis/mphud.gui.vbs
-
guis/mpmain.gui.vbs
-
guis/pda-weapons.pd.vbs
-
guis/pda.gui.vbs
-
guis/phobos/reactor_bridgecontrol2.gui
-
guis/phobos/teleporter_falsestart.gui
-
guis/phobos/teleporter_startup.gui
-
guis/phobos1/p1_allclear.gui.vbs
-
guis/phobos2/p2_secliftcontrol.gui
-
guis/phobos2/p2_securitylift.gui
-
guis/phobos3/lifesupport.gui
-
guis/phobos3/p3_reactorlift_bottom.gui
-
guis/phobos3/p3_reactorlift_top.gui
-
guis/phobos4/p4_warning.gui.vbs
-
guis/recycle1/floodpump1.gui
-
guis/restart.gui
-
guis/scoreboard.gui
-
guis/screens/cpu_uac.gui
-
guis/transfer/enter_erebus2.gui
-
guis/transfer/enter_phobos1.gui
-
guis/transfer/exit_erebus2.gui
-
guis/transfer/exit_erebus4.gui
-
newpdas/arcade.pda
-
newpdas/deltax_hook.pda
-
newpdas/erebus2_gregory.pda
-
newpdas/erebus2_tanner.pda
-
newpdas/erebus2_weston.pda
-
newpdas/erebus3_crane.pda
-
newpdas/erebus3_glenn.pda
-
newpdas/erebus3_jackson.pda
-
newpdas/erebus3_kharkov.pda
-
newpdas/erebus4_mac.pda
-
newpdas/erebus4_nathan.pda
-
newpdas/erebus4_ron.pda
-
newpdas/erebus5_avery.pda
-
newpdas/erebus5_gibson.pda
-
newpdas/erebus6_grossman.pda
-
newpdas/info_emails.pda
-
newpdas/personal.pda
-
newpdas/phobos1_fresko.pda
-
newpdas/phobos2_edens.pda
-
newpdas/phobos2_killian.pda
-
newpdas/phobos2_noordzy.pda
-
newpdas/phobos2_owens.pda
-
newpdas/phobos3_haag.pda
-
newpdas/phobos4_jolson.pda
-
newpdas/videos.pda
-
sound/vo/spanish/Betruger_Intro/Betruger_ournewreign.ogg
-
sound/vo/spanish/Betruger_Intro/Betruger_returnwhatisours.ogg
-
sound/vo/spanish/Erebus/transform_triggered1.ogg
-
sound/vo/spanish/Hell/Betruger_iwantit.wav
-
sound/vo/spanish/Hell/betruger_iwantit.ogg
-
sound/vo/spanish/Hell/betruger_mortal2.ogg
-
sound/vo/spanish/Hell/betruger_mortal2.wav
-
sound/vo/spanish/Hell/betruger_whatdid.ogg
-
sound/vo/spanish/Hell/betruger_whatdid.wav
-
sound/vo/spanish/Hell/mcneil_end.ogg
-
sound/vo/spanish/Scientist02/1_10.ogg
-
sound/vo/spanish/Scientist02/1_5.ogg
-
sound/vo/spanish/Scientist02/1_6.ogg
-
sound/vo/spanish/Scientist02/1_7.ogg
-
sound/vo/spanish/Scientist02/1_8.ogg
-
sound/vo/spanish/Scientist02/1_9.ogg
-
sound/vo/spanish/audio_logs/erebus2_01_tanner.ogg
-
sound/vo/spanish/audio_logs/erebus3_01_kharkov_alt.ogg
-
sound/vo/spanish/audio_logs/phobos1_01_fresko.ogg
-
sound/vo/spanish/audio_logs/phobos2_01_killian.ogg
-
sound/vo/spanish/audio_logs/phobos4_01_jolson.ogg
-
sound/vo/spanish/deltax/Betruger3_14.ogg
-
sound/vo/spanish/erebus1/Betruger_asipromissed.ogg
-
sound/vo/spanish/erebus1/Betruger_awaken.ogg
-
sound/vo/spanish/erebus1/Betruger_hellreachesout.ogg
-
sound/vo/spanish/erebus1/Betruger_huntthemdown.ogg
-
sound/vo/spanish/erebus1/Betruger_ournewreign.ogg
-
sound/vo/spanish/erebus1/Betruger_returnwhatisours.ogg
-
sound/vo/spanish/erebus1/Betruger_riseup.ogg
-
sound/vo/spanish/erebus1/Betruger_unbound.ogg
-
sound/vo/spanish/erebus1/betruger_theyhavearrived.ogg
-
sound/vo/spanish/erebus1/cc_clusterfuck.ogg
-
sound/vo/spanish/erebus1/cc_codered.ogg
-
sound/vo/spanish/erebus1/cc_fallbacknow.ogg
-
sound/vo/spanish/erebus1/cc_majorpowerloss.ogg
-
sound/vo/spanish/erebus1/cc_redteam.ogg
-
sound/vo/spanish/erebus1/cc_victorteam.ogg
-
sound/vo/spanish/erebus1/cc_whathappened.ogg
-
sound/vo/spanish/erebus1/marine_chatter_01.ogg
-
sound/vo/spanish/erebus1/marine_chatter_02.ogg
-
sound/vo/spanish/erebus1/marine_chatter_04.ogg
-
sound/vo/spanish/erebus1/marine_chatter_06.ogg
-
sound/vo/spanish/erebus1/marine_chatter_07.ogg
-
sound/vo/spanish/erebus1/marine_chatter_08.ogg
-
sound/vo/spanish/erebus1/marine_chatter_10.ogg
-
sound/vo/spanish/erebus1/mcniel_artifact.ogg
-
sound/vo/spanish/erebus1/new/eng01_seeingthis.ogg
-
sound/vo/spanish/erebus1/new/eng02_werein.ogg
-
sound/vo/spanish/erebus1/new/marine_backitup.ogg
-
sound/vo/spanish/erebus1/new/marine_chamber.ogg
-
sound/vo/spanish/erebus1/new/marine_onmyway.ogg
-
sound/vo/spanish/erebus1/new/mcneil_redteam.ogg
-
sound/vo/spanish/erebus1/new/mcneil_troubletransmission.ogg
-
sound/vo/spanish/erebus1/npcgrabber_composite.ogg
-
sound/vo/spanish/erebus1/sci02_mps.ogg
-
sound/vo/spanish/erebus1/sci02_trouble.ogg
-
sound/vo/spanish/erebus1/sci_channel.ogg
-
sound/vo/spanish/erebus1/scientist01_thereclose.ogg
-
sound/vo/spanish/erebus1/tango_team_vo.ogg
-
sound/vo/spanish/erebus2/e2_glassguy.ogg
-
sound/vo/spanish/erebus2/mcneil_htdeath1.ogg
-
sound/vo/spanish/erebus2/mcneil_htdeath2.ogg
-
sound/vo/spanish/erebus2/mcneil_static.ogg
-
sound/vo/spanish/erebus2/spooked_primary.ogg
-
sound/vo/spanish/erebus2/spooked_secondary1.ogg
-
sound/vo/spanish/erebus2/spooked_secondary2.ogg
-
sound/vo/spanish/erebus2/spooked_triggered.ogg
-
sound/vo/spanish/erebus3/computer3_1.ogg
-
sound/vo/spanish/erebus3/computer3_2.ogg
-
sound/vo/spanish/erebus3/computer3_3.ogg
-
sound/vo/spanish/erebus3/computer3_4.ogg
-
sound/vo/spanish/erebus3/computer3_5.ogg
-
sound/vo/spanish/erebus3/mcneil_triggered1.ogg
-
sound/vo/spanish/erebus3/mcneil_triggered2.ogg
-
sound/vo/spanish/erebus3/transform_death.ogg
-
sound/vo/spanish/erebus3/transform_idle1.ogg
-
sound/vo/spanish/erebus3/transform_transform1.ogg
-
sound/vo/spanish/erebus3/transform_triggered1.ogg
-
sound/vo/spanish/erebus3/transform_triggered2.ogg
-
sound/vo/spanish/erebus3/wounded_03.ogg
-
sound/vo/spanish/erebus4/computer4_1.ogg
-
sound/vo/spanish/erebus4/computer4_2.ogg
-
sound/vo/spanish/erebus4/computer4_3.ogg
-
sound/vo/spanish/erebus4/survivor_primary.ogg
-
sound/vo/spanish/erebus4/survivor_triggered1.ogg
-
sound/vo/spanish/erebus4/trappedguy_triggered1.ogg
-
sound/vo/spanish/erebus4/trappedguy_triggered2.ogg
-
sound/vo/spanish/erebus5/Computer5_1.ogg
-
sound/vo/spanish/erebus5/Computer5_2.ogg
-
sound/vo/spanish/erebus5/Computer5_3.ogg
-
sound/vo/spanish/erebus5/cloud_triggered1.ogg
-
sound/vo/spanish/erebus5/cloud_triggered2.ogg
-
sound/vo/spanish/erebus5/cloud_triggered3.ogg
-
sound/vo/spanish/erebus5/cloud_triggered4.ogg
-
sound/vo/spanish/erebus5/cloud_triggered5.ogg
-
sound/vo/spanish/erebus5/cloud_triggered6.ogg
-
sound/vo/spanish/erebus5/cloud_triggered7.ogg
-
sound/vo/spanish/erebus5/mcneil_triggered1.ogg
-
sound/vo/spanish/erebus5/mcneil_triggered2.ogg
-
sound/vo/spanish/erebus5/mcneil_triggered3.ogg
-
sound/vo/spanish/erebus5/mcneil_triggered4.ogg
-
sound/vo/spanish/erebus5/mcneil_triggered5.ogg
-
sound/vo/spanish/erebus5/mcneil_triggered_full.ogg
-
sound/vo/spanish/erebus6/bottech_primary.ogg
-
sound/vo/spanish/erebus6/bottech_secondary1.ogg
-
sound/vo/spanish/erebus6/bottech_secondary2.ogg
-
sound/vo/spanish/erebus6/bottech_trigger.ogg
-
sound/vo/spanish/erebus6/bottech_triggered1.ogg
-
sound/vo/spanish/erebus6/bottech_triggered2.ogg
-
sound/vo/spanish/phobos1/mcneil_teleporter.ogg
-
sound/vo/spanish/phobos1/phoboswelcome1.ogg
-
sound/vo/spanish/phobos2/core_four_failure.ogg
-
sound/vo/spanish/phobos2/core_four_online.ogg
-
sound/vo/spanish/phobos2/core_one_failure.ogg
-
sound/vo/spanish/phobos2/core_one_online.ogg
-
sound/vo/spanish/phobos2/core_three_failure.ogg
-
sound/vo/spanish/phobos2/core_three_online.ogg
-
sound/vo/spanish/phobos2/core_two_failure.ogg
-
sound/vo/spanish/phobos2/core_two_online.ogg
-
sound/vo/spanish/phobos2/mcneil_auxpower1.ogg
-
sound/vo/spanish/phobos2/mcneil_auxpower2.ogg
-
sound/vo/spanish/phobos2/mcneil_pumping.ogg
-
sound/vo/spanish/phobos2/mcneil_trigger1_01.ogg
-
sound/vo/spanish/phobos2/mcneil_trigger1_02a.ogg
-
sound/vo/spanish/phobos2/mcneil_trigger1_03.ogg
-
sound/vo/spanish/phobos2/mcneil_trigger1_04.ogg
-
sound/vo/spanish/phobos2/mcneil_trigger1_05.ogg
-
sound/vo/spanish/phobos2/mcneil_trigger1_06.ogg
-
sound/vo/spanish/phobos2/mcneil_trigger1_07.ogg
-
sound/vo/spanish/phobos2/mcneil_triggered2.ogg
-
sound/vo/spanish/phobos2/mcneil_triggered3.ogg
-
sound/vo/spanish/phobos3/computer3_1.ogg
-
sound/vo/spanish/phobos3/computer3_2.ogg
-
sound/vo/spanish/phobos3/computer3_3.ogg
-
sound/vo/spanish/phobos3/mcneil_bye3.ogg
-
sound/vo/spanish/phobos3/mcneil_reactor.ogg
-
sound/vo/spanish/phobos3/mcneil_support.ogg
-
sound/vo/spanish/phobos4/computer4_1.ogg
-
sound/vo/spanish/phobos4/computer4_2.ogg
-
sound/vo/spanish/phobos4/computer4_3.ogg
-
sound/vo/spanish/phobos4/computer4_4.ogg
-
sound/vo/spanish/phobos4/computer4_5.ogg
-
sound/vo/spanish/phobos4/computer4_6.ogg
-
sound/vo/spanish/phobos4/skytram2_1.ogg
-
sound/vo/spanish/phobos4/skytram2_2.ogg
-
sound/vo/spanish/phobos4/skytram2_3.ogg
-
sound/vo/spanish/recycling1/comp070.ogg
-
sound/vo/spanish/taunts/betruger_justbegun_comp.ogg
-
sound/vo/spanish/taunts/betruger_welcomedeath_comp.ogg
-
sound/vo/spanish/taunts/betruger_worthless2_comp.ogg
-
sound/vo/spanish/video/deployment.ogg
-
sound/vo/spanish/video/generator.ogg
-
sound/vo/spanish/video/grabber.ogg
-
strings/spanish001.lang
-
strings/spanishctf.lang