Overview
overview
3Static
static
3SDX.amk.0x...ct.bat
windows7-x64
1SDX.amk.0x...ct.bat
windows10-2004-x64
1SDX.amk.0x...DX.vbs
windows7-x64
1SDX.amk.0x...DX.vbs
windows10-2004-x64
1SDX.amk.0x...D5.exe
windows7-x64
1SDX.amk.0x...D5.exe
windows10-2004-x64
1SDX.amk.0x...SC.exe
windows7-x64
1SDX.amk.0x...SC.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
SDX.amk.0x00/Src/CleanProject.bat
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SDX.amk.0x00/Src/CleanProject.bat
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
SDX.amk.0x00/Src/Src/Core/SDX.vbs
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
SDX.amk.0x00/Src/Src/Core/SDX.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
SDX.amk.0x00/Src/Tools/SDX.0x00.MD5.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
SDX.amk.0x00/Src/Tools/SDX.0x00.MD5.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
SDX.amk.0x00/Src/Tools/SDX.0x00.SC.exe
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
SDX.amk.0x00/Src/Tools/SDX.0x00.SC.exe
Resource
win10v2004-20230220-en
General
-
Target
SDX.amk.0x00.rar
-
Size
50KB
-
MD5
6a9abbe9db6d919e30f42fc40484c5be
-
SHA1
eafbb79263ce24a035261fe6cd622b8d15c974b6
-
SHA256
7136c83eb80350e100637c43864b082d104842fcb9396e161b6039ef0522bc8a
-
SHA512
585987839e893f0baa003c3d687eb6f82f231e13640ed6d1b630480a1f0a481bcc48a86b8083fc0565e0c3af95e74d5bf42840722eb42017a9adae6ee7ca9982
-
SSDEEP
768:io6Yp3YckkfnDjf4FsaWeGMKc5kN9Kpb/EsHRvU+5uqXy0757vKu3psmJSN:iSZYdkfDjfHMkHqDEM/H7Bn5smJY
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/SDX.amk.0x00/Src/Tools/SDX.0x00.MD5.exe unpack001/SDX.amk.0x00/Src/Tools/SDX.0x00.SC.exe
Files
-
SDX.amk.0x00.rar.rar
Password: infected
-
SDX.amk.0x00/README.txt
-
SDX.amk.0x00/Src/CleanProject.bat
-
SDX.amk.0x00/Src/Doc/Commands.txt
-
SDX.amk.0x00/Src/Inc/SDX.h
-
SDX.amk.0x00/Src/Inc/Utilities.h
-
SDX.amk.0x00/Src/Inc/client.h
-
SDX.amk.0x00/Src/Inc/config.h
-
SDX.amk.0x00/Src/SDX.dsp
-
SDX.amk.0x00/Src/SDX.dsw
-
SDX.amk.0x00/Src/Src/Core/SDX.cpp.vbs
-
SDX.amk.0x00/Src/Src/Core/mac.cpp
-
SDX.amk.0x00/Src/Src/Utilities/AVUpdates.cpp
-
SDX.amk.0x00/Src/Src/Utilities/Killer.cpp
-
SDX.amk.0x00/Src/Tools/SDX.0x00.MD5.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
SDX.amk.0x00/Src/Tools/SDX.0x00.SC.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
SDX.amk.0x00/apl.txt
-
SDX.amk.0x00/changes.txt
-
SDX.amk.0x00/disclaimer.txt
-
SDX.amk.0x00/todo.txt