Static task
static1
Behavioral task
behavioral1
Sample
0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899.js
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899.js
Resource
win10v2004-20230220-en
General
-
Target
0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899.bin
-
Size
405KB
-
MD5
1cbbb572f88a23f55f086b96327fe5e0
-
SHA1
6d1593368828198dfb5b9eceaab71f49aa535c40
-
SHA256
0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899
-
SHA512
dcab6c6025ca9da5301cb6913be35d4285d1ceecc9bd811dfd23727b1b2a14618f3e7a98c18d7a335373c5160c9cb5f62c10f0385387ab7417fc917283981ffd
-
SSDEEP
3072:WV9Es470kT97kFUxz3mKMACR3R7DyWvEXNemiS0KPMID5whT0bMNj67:dwkwM3zUJtMtwmIj67
Malware Config
Signatures
-
AgentTesla payload 1 IoCs
resource yara_rule sample family_agenttesla -
Agenttesla family
-
DarkTrack payload 1 IoCs
resource yara_rule sample family_darktrack -
Darkcomet family
-
Darktrack family
-
Detect LockFile payload 1 IoCs
resource yara_rule sample family_lockfile -
Detected Mount Locker ransomware 1 IoCs
resource yara_rule sample RANSOM_mountlocker -
Detects Surtr Payload 1 IoCs
resource yara_rule sample family_surtr -
Detects Zeppelin payload 1 IoCs
resource yara_rule sample family_zeppelin -
Lockfile family
-
resource yara_rule sample m00nd3v_logger -
M00nd3v_logger family
-
MassLogger log file 1 IoCs
Detects a log file produced by MassLogger.
resource yara_rule sample masslogger_log_file -
Masslogger family
-
Matiex Main payload 1 IoCs
resource yara_rule sample family_matiex -
Matiex family
-
Mountlocker family
-
Shurk Stealer payload 1 IoCs
resource yara_rule sample shurk_stealer -
Shurk family
-
StormKitty payload 1 IoCs
resource yara_rule sample family_stormkitty -
Stormkitty family
-
Surtr family
-
Vulturi family
-
Vulturi payload 1 IoCs
resource yara_rule sample family_vulturi -
XMRig Miner payload 1 IoCs
resource yara_rule sample family_xmrig -
Xmrig family
-
Zeppelin family
Files
-
0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899.bin.js