Static task
static1
Behavioral task
behavioral1
Sample
AlisInjectorx64.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
AlisInjectorx64.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
AlisInjectorx86.exe
Resource
win7-20230712-en
General
-
Target
Downloads hackvshack.net.rar
-
Size
500KB
-
MD5
78c572226af499952345055c6101cb86
-
SHA1
5a292923dada88db5d552d6101b4050fe894c375
-
SHA256
d711592511c6cc7df25b99030ac3e62b9bd0796dc902c05048c35effcbabbe83
-
SHA512
81d3947db4a123390ef765e6b2341be5c57175852c13ed088dedfccb9d6b87f7ece5ba915fa138b6b62baa6b8c6d7ac983ea7d05920ee58f230ba4f91ef353a0
-
SSDEEP
12288:8vS16DTEtqU8JoPRott2ArnRNIF5B+q9Eou/jbU:8a16fEtqrKZotxTROT+q0PU
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/AlisInjectorx64.exe unpack001/AlisInjectorx86.exe
Files
-
Downloads hackvshack.net.rar.rar
Password: hvh.net
-
AlisInjectorx64.exe.exe windows x86
Password: hvh.net
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 231KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AlisInjectorx86.exe.exe windows x86
Password: hvh.net
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 211KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ