Overview
overview
6Static
static
1Download.rar
windows7-x64
3Download.rar
windows10-2004-x64
3Secured.rar
windows7-x64
3Secured.rar
windows10-2004-x64
3Settings.txt
windows7-x64
1Settings.txt
windows10-2004-x64
1checker Team Rz.exe
windows7-x64
6checker Team Rz.exe
windows10-2004-x64
6checker_Te...nc.exe
windows7-x64
6checker_Te...nc.exe
windows10-2004-x64
6Static task
static1
Behavioral task
behavioral1
Sample
Download.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Download.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Secured.rar
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Secured.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Settings.txt
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Settings.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
checker Team Rz.exe
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
checker Team Rz.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
checker_Team_Rz_async.exe
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
checker_Team_Rz_async.exe
Resource
win10v2004-20230220-en
General
-
Target
Download.rar
-
Size
183KB
-
MD5
b82892d6f56cf7901e06b4d3599d3741
-
SHA1
a91a1f27a31a8700a01f81e4da61d18d65d2745e
-
SHA256
cb0fa355e8da0353375f9b314d51586ce2f1421cda9ec53f1b659733bb7366de
-
SHA512
3dba80889cf4344c3ae545c2fffb8771e8cbe74aab6527e122a1f6bd0dc50edc50256c71f76dea49392161eeb0eeb792daf90d89dd67cb83a3beb1278237a08d
-
SSDEEP
3072:DnfULm//svyNnkjVUNgoV5QH9/1FxSl3tKm+I4VUukTptzCVg0Cg:DfiosvyNGV+C9/vEbKbtWrb4Cg
Malware Config
Signatures
Files
-
Download.rar.rar
-
Secured.rar (1).rar
-
Settings.txt
-
checker Team Rz.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 615KB - Virtual size: 615KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
checker_Team_Rz_async.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 614KB - Virtual size: 613KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ