Overview
overview
10Static
static
1MAKS V2.2.zip
windows10-1703-x64
1MAKS V2.2/....2.exe
windows10-1703-x64
1MAKS V2.2/....2.exe
windows10-1703-x64
10MAKS V2.2/...de.dll
windows10-1703-x64
1MAKS V2.2/....fatih
windows10-1703-x64
3MAKS V2.2/....fatih
windows10-1703-x64
3MAKS V2.2/tanim.fatih
windows10-1703-x64
3MAKS V2.2/....fatih
windows10-1703-x64
3Static task
static1
Behavioral task
behavioral1
Sample
MAKS V2.2.zip
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
MAKS V2.2/ANAHTAR OLUŞTUR V2.2.exe
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
MAKS V2.2/MAKS KURULUM V2.2.exe
Resource
win10-20230220-en
Behavioral task
behavioral4
Sample
MAKS V2.2/MessagingToolkit.QRCode.dll
Resource
win10-20230220-en
Behavioral task
behavioral5
Sample
MAKS V2.2/applist.fatih
Resource
win10-20230220-en
Behavioral task
behavioral6
Sample
MAKS V2.2/iplist.fatih
Resource
win10-20230220-en
Behavioral task
behavioral7
Sample
MAKS V2.2/tanim.fatih
Resource
win10-20230220-en
Behavioral task
behavioral8
Sample
MAKS V2.2/weblist.fatih
Resource
win10-20230220-en
General
-
Target
MAKS V2.2.zip
-
Size
7.0MB
-
MD5
d9d532824ed4cce36c410ad25736e7a1
-
SHA1
a179c80ba23a4379ce4b8ddc2ad6171c4d8eaa98
-
SHA256
c1f8d7eed1a5085bec2a51f189d0c82312ba02b396a959caa01d2378250d6262
-
SHA512
6e733197dcc3e206122ae16978ac66cd873874059b9f649d61412bf100115ab10ec47e34146c6b89d5313231b5b35453994bfb9b870477f40534276f70910e19
-
SSDEEP
196608:1UiImeciUQlwz/DMr/gdGUI/VeIMZoeGrdlq/hBZvwXx6Qd:6dvULjDMr/BU+oIldlUU6Qd
Malware Config
Signatures
Files
-
MAKS V2.2.zip.zip
-
MAKS V2.2/ANAHTAR OLUŞTUR V2.2.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 501B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 230KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MAKS V2.2/MAKS KURULUM V2.2.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 18.7MB - Virtual size: 18.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 230KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MAKS V2.2/MessagingToolkit.QRCode.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MAKS V2.2/applist.fatih
-
MAKS V2.2/iplist.fatih
-
MAKS V2.2/tanim.fatih
-
MAKS V2.2/weblist.fatih