hxxp://calculator[://]\x4f\x55\x5a\x57\x39\x4e\x47\x45\x4d\x47\x4b\x46\x4b\x57\x33\x31\x46\x38\x49\x44\x48\x39\x44\x39\x49\x32\x55\x46\x51\x49\x33\x33\x57\x4e\x5a\x52\x4d\x55\x52\x37\x44\x49\x57\x35\x44\x33\x5a\x36\x38\x56\x4c\x37\x51\x49\x49\x58\x33\x30\x4e\x57\x35\x55\x4b\x53\x35\x35\x45\x45\x41\x34\x58\x48\x30\x58\x4b\x58\x47\x44\x57\x47\x4f\x52\x4c\x33\x32\x41\x42\x43\x37\x42\x4a\x49\x4a\x42\x38\x45\x4d\x54\x53\x50\x4a\x36\x4d\x43\x50\x46\x47\x58\x42\x4a\x34\x49\x36\x39\x41\x44\x58\x48\x30\x30\x52\x44\x34\x36\x35\x45\x45\x48\x31\x34\x35\x35\x50\x35\x50\x35\x5a\x48\x55\x39\x31\x56\x53\x49\x56\x43\x35\x39\x59\x52\x56\x56\x49\x57\x4f\x53\x50\x4d\x55\x4b\x31\x58\x35\x31\x4e\x31\x34\x45\x48\x38\x56\x54\x4c\x52\x49\x57\x31\x34\x53\x45\x45\x53\x4e\x51\x56\x30\x4e\x4f\x4d\x47\x4c\x32\x4a\x4d\x50\x55\x34\x4c\x4c\x30\x4c\x39\x36\x4e\x47\x4c\x59\x49\x46\x50\x31\x42\x36\x31\x41\x37\x49\x54\x4b\x45\x51\x45\x31\x47\x4b\x43\x52\x4b\x54\x30\x32\x32\x37\x42\x57\x41\x43\x4c\x54\x52\x41\x43\x48\x34\x57\x31\x53\x47\x37\x53\x56\x5a\x57\x43\x4d\x53\x34\x48\x53\x4a\x59\x37\x31\x4a\x44\x56\x4b\x41\x37\x30\x50\x33\x4e\x45\x41\x58\x59\x53\x54\x55\x31\x30\x50\x4e\x54\x4c\x46\x53\x37\x41\x37\x57\x47\x5a\x32\x45\x52\x53\x32\x34\x30\x34\x54\x4d\x37\x52\x54\x4a\x31\x45\x39\x5a\x54\x55\x4f\x59\x4b\x39\x30\x41\x4d\x51\x46\x5a\x56\x54\x39\x53\x54\x39\x4a\x58\x56\x43\x30\x38\x34\x53\x45\x33\x46\x30\x5a\x45\x50\x35\x43\x50\x52\x59\x42\x43\x56\x5a\x4e\x50\x45\x30\x48\x38\x4c\x58\x51\x59\x53\x38\x32\x38\x35\x49\x46\x54\x33\x4f\x56\x37\x4a\x4e\x45\x50\x55\x37\x41\x44\x30\x39\x43\x53\x37\x4b\x31\x36\x36\x34\x42\x56\x5a\x36\x34\x30\x33\x47\x37\x49\x42\x30\x47\x54\x37\x39\x4a\x44\x4b\x34\x54\x4d\x4c\x46\x38\x49\x53\x32\x58\x4f\x49\x52\x59\x56\x56\x33\x42\x4a\x37\x34\x52\x54\x36\x4d\x4c\x4b\x33\x52\x47\x46\x58\x41\x32\x5a\x4b\x4f\x34\x31\x38\x58\x4d\x37\x4d\x44\x4f\x38\x33\x41\x32\x42\x42\x41\x55\x4b\x33\x4d\x36\x4f\x59\x58\x32\x38\x48\x50\x45\x56\x56\x4c\x4b\x44\x50\x34\x58\x4b\x42\x4d\x55\x33\x38\x32\x50\x48\x31\x52\x35\x56\x37\x55\x48\x4e\x4c\x45\x56\x55\x51\x52\x43\x4c

Sharing

Behavioral task

behavioral1

Sample

http://calculator://\x4f\x55\x5a\x57\x39\x4e\x47\x45\x4d\x47\x4b\x46\x4b\x57\x33\x31\x46\x38\x49\x44\x48\x39\x44\x39\x49\x32\x55\x46\x51\x49\x33\x33\x57\x4e\x5a\x52\x4d\x55\x52\x37\x44\x49\x57\x35\x44\x33\x5a\x36\x38\x56\x4c\x37\x51\x49\x49\x58\x33\x30\x4e\x57\x35\x55\x4b\x53\x35\x35\x45\x45\x41\x34\x58\x48\x30\x58\x4b\x58\x47\x44\x57\x47\x4f\x52\x4c\x33\x32\x41\x42\x43\x37\x42\x4a\x49\x4a\x42\x38\x45\x4d\x54\x53\x50\x4a\x36\x4d\x43\x50\x46\x47\x58\x42\x4a\x34\x49\x36\x39\x41\x44\x58\x48\x30\x30\x52\x44\x34\x36\x35\x45\x45\x48\x31\x34\x35\x35\x50\x35\x50\x35\x5a\x48\x55\x39\x31\x56\x53\x49\x56\x43\x35\x39\x59\x52\x56\x56\x49\x57\x4f\x53\x50\x4d\x55\x4b\x31\x58\x35\x31\x4e\x31\x34\x45\x48\x38\x56\x54\x4c\x52\x49\x57\x31\x34\x53\x45\x45\x53\x4e\x51\x56\x30\x4e\x4f\x4d\x47\x4c\x32\x4a\x4d\x50\x55\x34\x4c\x4c\x30\x4c\x39\x36\x4e\x47\x4c\x59\x49\x46\x50\x31\x42\x36\x31\x41\x37\x49\x54\x4b\x45\x51\x45\x31\x47\x4b\x43\x52\x4b\x54\x30\x32\x32\x37\x42\x57\x41\x43\x4c\x54\x52\x41\x43\x48\x34\x57\x31\x53\x47\x37\x53\x56\x5a\x57\x43\x4d\x53\x34\x48\x53\x4a\x59\x37\x31\x4a\x44\x56\x4b\x41\x37\x30\x50\x33\x4e\x45\x41\x58\x59\x53\x54\x55\x31\x30\x50\x4e\x54\x4c\x46\x53\x37\x41\x37\x57\x47\x5a\x32\x45\x52\x53\x32\x34\x30\x34\x54\x4d\x37\x52\x54\x4a\x31\x45\x39\x5a\x54\x55\x4f\x59\x4b\x39\x30\x41\x4d\x51\x46\x5a\x56\x54\x39\x53\x54\x39\x4a\x58\x56\x43\x30\x38\x34\x53\x45\x33\x46\x30\x5a\x45\x50\x35\x43\x50\x52\x59\x42\x43\x56\x5a\x4e\x50\x45\x30\x48\x38\x4c\x58\x51\x59\x53\x38\x32\x38\x35\x49\x46\x54\x33\x4f\x56\x37\x4a\x4e\x45\x50\x55\x37\x41\x44\x30\x39\x43\x53\x37\x4b\x31\x36\x36\x34\x42\x56\x5a\x36\x34\x30\x33\x47\x37\x49\x42\x30\x47\x54\x37\x39\x4a\x44\x4b\x34\x54\x4d\x4c\x46\x38\x49\x53\x32\x58\x4f\x49\x52\x59\x56\x56\x33\x42\x4a\x37\x34\x52\x54\x36\x4d\x4c\x4b\x33\x52\x47\x46\x58\x41\x32\x5a\x4b\x4f\x34\x31\x38\x58\x4d\x37\x4d\x44\x4f\x38\x33\x41\x32\x42\x42\x41\x55\x4b\x33\x4d\x36\x4f\x59\x58\x32\x38\x48\x50\x45\x56\x56\x4c\x4b\x44\x50\x34\x58\x4b\x42\x4d\x55\x33\x38\x32\x50\x48\x31\x52\x35\x56\x37\x55\x48\x4e\x4c\x45\x56\x55\x51\x52\x43\x4c

Resource

win10v2004-20230703-en

windows10-2004-x64

9 signatures

1800 seconds

General

Target

http://calculator://\x4f\x55\x5a\x57\x39\x4e\x47\x45\x4d\x47\x4b\x46\x4b\x57\x33\x31\x46\x38\x49\x44\x48\x39\x44\x39\x49\x32\x55\x46\x51\x49\x33\x33\x57\x4e\x5a\x52\x4d\x55\x52\x37\x44\x49\x57\x35\x44\x33\x5a\x36\x38\x56\x4c\x37\x51\x49\x49\x58\x33\x30\x4e\x57\x35\x55\x4b\x53\x35\x35\x45\x45\x41\x34\x58\x48\x30\x58\x4b\x58\x47\x44\x57\x47\x4f\x52\x4c\x33\x32\x41\x42\x43\x37\x42\x4a\x49\x4a\x42\x38\x45\x4d\x54\x53\x50\x4a\x36\x4d\x43\x50\x46\x47\x58\x42\x4a\x34\x49\x36\x39\x41\x44\x58\x48\x30\x30\x52\x44\x34\x36\x35\x45\x45\x48\x31\x34\x35\x35\x50\x35\x50\x35\x5a\x48\x55\x39\x31\x56\x53\x49\x56\x43\x35\x39\x59\x52\x56\x56\x49\x57\x4f\x53\x50\x4d\x55\x4b\x31\x58\x35\x31\x4e\x31\x34\x45\x48\x38\x56\x54\x4c\x52\x49\x57\x31\x34\x53\x45\x45\x53\x4e\x51\x56\x30\x4e\x4f\x4d\x47\x4c\x32\x4a\x4d\x50\x55\x34\x4c\x4c\x30\x4c\x39\x36\x4e\x47\x4c\x59\x49\x46\x50\x31\x42\x36\x31\x41\x37\x49\x54\x4b\x45\x51\x45\x31\x47\x4b\x43\x52\x4b\x54\x30\x32\x32\x37\x42\x57\x41\x43\x4c\x54\x52\x41\x43\x48\x34\x57\x31\x53\x47\x37\x53\x56\x5a\x57\x43\x4d\x53\x34\x48\x53\x4a\x59\x37\x31\x4a\x44\x56\x4b\x41\x37\x30\x50\x33\x4e\x45\x41\x58\x59\x53\x54\x55\x31\x30\x50\x4e\x54\x4c\x46\x53\x37\x41\x37\x57\x47\x5a\x32\x45\x52\x53\x32\x34\x30\x34\x54\x4d\x37\x52\x54\x4a\x31\x45\x39\x5a\x54\x55\x4f\x59\x4b\x39\x30\x41\x4d\x51\x46\x5a\x56\x54\x39\x53\x54\x39\x4a\x58\x56\x43\x30\x38\x34\x53\x45\x33\x46\x30\x5a\x45\x50\x35\x43\x50\x52\x59\x42\x43\x56\x5a\x4e\x50\x45\x30\x48\x38\x4c\x58\x51\x59\x53\x38\x32\x38\x35\x49\x46\x54\x33\x4f\x56\x37\x4a\x4e\x45\x50\x55\x37\x41\x44\x30\x39\x43\x53\x37\x4b\x31\x36\x36\x34\x42\x56\x5a\x36\x34\x30\x33\x47\x37\x49\x42\x30\x47\x54\x37\x39\x4a\x44\x4b\x34\x54\x4d\x4c\x46\x38\x49\x53\x32\x58\x4f\x49\x52\x59\x56\x56\x33\x42\x4a\x37\x34\x52\x54\x36\x4d\x4c\x4b\x33\x52\x47\x46\x58\x41\x32\x5a\x4b\x4f\x34\x31\x38\x58\x4d\x37\x4d\x44\x4f\x38\x33\x41\x32\x42\x42\x41\x55\x4b\x33\x4d\x36\x4f\x59\x58\x32\x38\x48\x50\x45\x56\x56\x4c\x4b\x44\x50\x34\x58\x4b\x42\x4d\x55\x33\x38\x32\x50\x48\x31\x52\x35\x56\x37\x55\x48\x4e\x4c\x45\x56\x55\x51\x52\x43\x4c

Sharing

General

Malware Config

Signatures

Files