Static task
static1
Behavioral task
behavioral1
Sample
Motion.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Motion.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Sharpire.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Sharpire.exe
Resource
win10v2004-20230220-en
General
-
Target
samples.zip
-
Size
87KB
-
MD5
b6664141ead237a5693e9c7ea516879c
-
SHA1
e3175ee8067f58fcc5972cd0d26ff337e4d23286
-
SHA256
5b795e3f1453cadd10ea1839972e1d080820b975328cbe26dd8942fa70584aaa
-
SHA512
ff256eb9c98cb64c237ac954bfdf41cb48b144f28c4eb1ee19d73bb49c65fb8a94287b10324955c9d29c0d8371c56f1e0bc1de24f46a1698646f676570e953e1
-
SSDEEP
1536:p2kQknGQ0bEXoDF6zB75UYZajk/pwiXeayJMieJG2PMH/PaxaSBK4Fhc9v:pck/0IFOL4wiOalw2PMH/PagSBl49v
Malware Config
Signatures
Files
-
samples.zip.zip
-
Motion.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Sharpire.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ