Overview
overview
4Static
static
4Slinkware.zip
windows7-x64
1Slinkware.zip
windows10-2004-x64
1Butterfly.toml
windows7-x64
3Butterfly.toml
windows10-2004-x64
3Paper.pdf
windows7-x64
1Paper.pdf
windows10-2004-x64
1Slinkware.exe
windows7-x64
1Slinkware.exe
windows10-2004-x64
1Slinkware.toml
windows7-x64
3Slinkware.toml
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
23/05/2023, 12:17
Behavioral task
behavioral1
Sample
Slinkware.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Slinkware.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Butterfly.toml
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Butterfly.toml
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Paper.pdf
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Paper.pdf
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Slinkware.exe
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Slinkware.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Slinkware.toml
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
Slinkware.toml
Resource
win10v2004-20230220-en
General
-
Target
Paper.pdf
-
Size
483KB
-
MD5
f96e6ade3cb81a7d204d7792023ffa40
-
SHA1
adb37ee06ea6f10b1f44275e5599b792379283a9
-
SHA256
62fe25a7bd22e357c8cf077c879e02ce5e8ab8af83e556e46746542dcabdbecd
-
SHA512
1ec5b22bfd689d0cde66ddc5825c50f9ec143f9ba1946da668076ae9e931540ac67c36819ad4c32b03906953b054ea642a7f11148eeae75137fda3a9adceaddd
-
SSDEEP
12288:pNkng6Bvi5630LKw/J49BchEnJ6LyLQA1K/wgwM:jkPqk3MKwCqAJ6LCKwM
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2004 AcroRd32.exe 2004 AcroRd32.exe 2004 AcroRd32.exe