Overview
overview
5Static
static
1a2ae5354cb...a6.msg
windows7-x64
5a2ae5354cb...a6.msg
windows10-2004-x64
320230808_B...ly.zip
windows7-x64
120230808_B...ly.zip
windows10-2004-x64
1EMIR repor...G.docx
windows7-x64
4EMIR repor...G.docx
windows10-2004-x64
1image001.gif
windows7-x64
1image001.gif
windows10-2004-x64
1image002.jpg
windows7-x64
3image002.jpg
windows10-2004-x64
3image003.png
windows7-x64
3image003.png
windows10-2004-x64
3image004.jpg
windows7-x64
3image004.jpg
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
a2ae5354cbb23a378cfb695a877aadbfe65850f9368a5684cfa1150d4a43c9a6.msg
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a2ae5354cbb23a378cfb695a877aadbfe65850f9368a5684cfa1150d4a43c9a6.msg
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
20230808_Brokerage Agreement_Zarz_560_2019_DCCL_08.08.2023_DCCL executed only.zip
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
20230808_Brokerage Agreement_Zarz_560_2019_DCCL_08.08.2023_DCCL executed only.zip
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
EMIR reporting form_ENG.docx
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
EMIR reporting form_ENG.docx
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
image001.gif
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
image001.gif
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
image002.jpg
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
image002.jpg
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
image003.png
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
image003.png
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
image004.jpg
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
image004.jpg
Resource
win10v2004-20230915-en
General
-
Target
a2ae5354cbb23a378cfb695a877aadbfe65850f9368a5684cfa1150d4a43c9a6.doc
-
Size
1.7MB
-
MD5
636c58a2aa72a901e8f34c6b96c71564
-
SHA1
b31ab6129d3bb6052ec4080809596b670fcfea6f
-
SHA256
a2ae5354cbb23a378cfb695a877aadbfe65850f9368a5684cfa1150d4a43c9a6
-
SHA512
b16600f8b4174039ec5d2f2140f4ce77e4c4a6bd02f05123089a3596202374b8faf09ab472780073fba42d14c815a5094cdc4a1524a237d80a8f2ebb181efabc
-
SSDEEP
24576:W727BM8HG4wDjt4pai3R1ZSpUiSRV1GeT9Pp28fLUMjBa6iWCmIb/Eg4R:W6meG/jt0a+R1SUDlvT9B2AUyvi4A/
Malware Config
Signatures
Files
-
a2ae5354cbb23a378cfb695a877aadbfe65850f9368a5684cfa1150d4a43c9a6.doc.msg
-
http://dragon-capital..com
-
http://dragon-capital.com
-
http://secure-web.cisco.com/16ajPIZrjTCW3e7uY9oFJwKMY1WAokwAEaw6oVlefYstPd7FxCJhWuIuMtOL6U3vwlkjWMPKljf0JKebkmoAM3nSTl5rfXCqDcHdUoqs5GSpkyoEEJv0qJbYjP8BrJZYvc9zIhyo5jaLR-bdIEF8VZ4cPcXDbJrC8dhzLKYdwyXxPd4CoPeyXYsD_bzDziVAn6-AfehO8o9cJKj5HqqxgZxuC4UUXNOy1N6nrZyrn8Yram3CIaNfDkipx-tcw2igZg9M2CcYo1yFfIwJYUjR5qknn-9lwfpjMnVT8VWzqf4idNqTPSfIDSHQqzrLh_tN_/http%3A%2F%2Fwww.9folders.com%2F
-
http://secure-web.cisco.com/17bgZ8QAG1_l0nEywRA344j8WwoKsCsQ6aHn39LJr0VTLto9BYChwEGRt33UJH4jSAd7I-khXPZg1y_aJEAHxgGSlNyXo0Jue4Q1k8MJb2-FXaJ73rnw0Vdd8IWd5A7cjQb7w0AmsNK48qBOb9C_OMyrsL0DRlbUPMWvzrHICIy9u6H8BXeDQsaC8rItLO3Hc7rT5q9qag-8Ec7pehkYC88J8TmBi8V5mPnlaBnYyL3P8xFNp_vyfvktEUjIdHCik4jGgnzWeE1-93fOyx6ZFS95FLT0M6oN-_z620rEuM5XIKzIv-B9x84-mk5U0wvTp/http%3A%2F%2Fwww.dccl.com.cy
-
http://secure-web.cisco.com/1CV-xPcqsAmwv439vQ32wb4PzXFlSgj3wKCKfJUrYQJyuI-qdUL9mMccTq0yhxtksOVW6s30Iv-9tSv0cY-VipYgfausN4u4m216LK3CVBQupVBzO2TLJ0qxgiqLfFE1tMuydJsq2nNl3oSJc1C8KE5vluQQoF0WGBXeQYuo3pSnW-wRSaanQDO8PCE4_ieOHQ3aDgRzBSvJ4cMWVwtOQXzPWy8Ldxgipq4vmF87TkiNY2jUYFQGhXaepgzF4UXXj32bWxhJY5FLEyDWsDETwIbvOPcUuaM7GUfd-5BnwnTCS_8Spmlf5vnFWnuZC8teR/http%3A%2F%2Fwww.dccl.com.cy
-
http://secure-web.cisco.com/1GfbRz6VtipE6uMGLBxgssB3dSuk08edhwFmYeeXjZ7WbId4U9oqDZIABno2Kbkm_vV6QoeHW7W3yPQkRbnoszNK3yHqSeb7IcoNmLXg9NbsWQUESqulWdTroE8brmBy3E5FWi59-FWWkWOkSLoSeloUNnT12znv549LSQnidhK_kgyKJa1POXq0FZy9fRgHRhIi7wEy_vw7DtM7EW7ZIkZLJ45kHDyjw3XIWkv1JNAbyzRZo8UgPOUSqEXc9RT_Ix-CruBsK1NgDs7A3StP0bs_3UzfnnFJwdDojqMFMskHzRai_gUzVk-d4SYtjGHD2/http%3A%2F%2Fwww.dccl.com.cy
-
http://secure-web.cisco.com/1caJWK9XWXzlZvDNqBajAG1CO_tpkT4-8Y89emmsU6jRiSH2VXlUghlmMzxwwB4cDeogYWXqlzkH3ozHNaH5EkzYQcYTzcGS8o3rm6dhE9Od08MLLgqi2cdEJARLp9wvsNTPTG2uJYHM9XD0pTDEq0Msbq-A9E76Jy2RmGVvTJ00Tx82kxjQLjYrLFZyNW2UHOXaQO-gzYoDR3PEzj7L1_AdLOHwF3q9ZLzcELqcpMijmVAAxtjvskwqJxMEPEId8DKgv7uDRwu9_BBEwbs3pNUvY0bHSTz3hR8Pe5_lBJgAqq2AHsl8Dgd0rBv0xWNQP/http%3A%2F%2Fwww.dccl.com.cy
-
http://santander.pl
-
http://www.dccl.com.cy
-
-
20230808_Brokerage Agreement_Zarz_560_2019_DCCL_08.08.2023_DCCL executed only.zip.zip
-
EMIR reporting form_ENG.docx.docx office2007
-
image001.gif.gif
-
image002.jpg.jpg
-
image003.png.png
-
image004.jpg