Overview
overview
10Static
static
79e98c04e77...21d.js
windows7-x64
109e98c04e77...21d.js
windows10-2004-x64
10c72d738747...8bf.js
windows7-x64
10c72d738747...8bf.js
windows10-2004-x64
10cc03a8f943...70.exe
windows7-x64
10cc03a8f943...70.exe
windows10-2004-x64
1eb6af295c3...cb.exe
windows7-x64
7eb6af295c3...cb.exe
windows10-2004-x64
7Behavioral task
behavioral1
Sample
9e98c04e777e77b1498f4b3447b6221d.js
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9e98c04e777e77b1498f4b3447b6221d.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
c72d738747f68d4f8d9e9368e47928bf.js
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
c72d738747f68d4f8d9e9368e47928bf.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
cc03a8f9433b57e4ea8a87544dde5470.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
cc03a8f9433b57e4ea8a87544dde5470.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
eb6af295c348f16f2361cbe96fdc3bcb.exe
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
eb6af295c348f16f2361cbe96fdc3bcb.exe
Resource
win10v2004-20230220-en
General
-
Target
Downloads.rar
-
Size
1.4MB
-
MD5
8e4150faf7e109bb27bae81ee77e2593
-
SHA1
6544b682bb420ae6a0922906b90c0fe2851650e3
-
SHA256
453b93a211b664c8be6ad43c584a9c4e3781ea9e51c3d9d598b4cd9719fcb7c6
-
SHA512
94ba63c6da0825b75ec75645b1a897daeee1beab171d55c9eed45f072e4333d777156509794b1d6425fcfdeda789a2c13fb22cd13dfa737e36c3694f949aba3c
-
SSDEEP
24576:oDADPbxO1WFjaO9dqSF0oalGCbkXECIdxGMvMIYtbZ57gKrlPT+:oDOPbxO1WFuO9NuGCgXKFMvp7ZBT+
Malware Config
Signatures
-
resource yara_rule static1/unpack001/eb6af295c348f16f2361cbe96fdc3bcb.exe.vir upx
Files
-
Downloads.rar.rar
-
9e98c04e777e77b1498f4b3447b6221d.js.vir.js
-
c72d738747f68d4f8d9e9368e47928bf.js.vir.js
-
cc03a8f9433b57e4ea8a87544dde5470.exe.vir.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
eb6af295c348f16f2361cbe96fdc3bcb.exe.vir.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 904KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 547KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE