Overview
overview
7Static
static
7Keyword_Ca...x.html
windows7-x64
1Keyword_Ca...x.html
windows10-2004-x64
1Keyword Ca...or.exe
windows7-x64
7Keyword Ca...or.exe
windows10-2004-x64
7index.html
windows7-x64
1index.html
windows10-2004-x64
1Keyword Ca...or.exe
windows7-x64
7Keyword Ca...or.exe
windows10-2004-x64
7success.html
windows7-x64
1success.html
windows10-2004-x64
1Keyword_Ca...s.html
windows7-x64
1Keyword_Ca...s.html
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Keyword_Cash_Generator/index.html
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Keyword_Cash_Generator/index.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
Keyword Cash Generator.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
Keyword Cash Generator.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
index.html
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
index.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
Keyword Cash Generator.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
Keyword Cash Generator.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
success.html
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
success.html
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
Keyword_Cash_Generator/success.html
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
Keyword_Cash_Generator/success.html
Resource
win10v2004-20230915-en
General
-
Target
31dd2d0f20d96658d01d75103a5654de6da53fdf9b1cbf71efd881d572d499e4.zip
-
Size
3.1MB
-
MD5
684e2467a97e78a363fa6f2e070a0b2c
-
SHA1
241ca2d5ab63c12a0c17a4ed820558c1bbb70058
-
SHA256
31dd2d0f20d96658d01d75103a5654de6da53fdf9b1cbf71efd881d572d499e4
-
SHA512
8ce1eb7910b11b3e6eb1285495964626378ba7c9662171839fc968bdf990d85713507c14da5da09d4a49cad362c7105a65fede45e024bc3dde77bce611e07b4c
-
SSDEEP
49152:8Eyxkn6BLUvt/zZ4jP3s5F4X4ICuJVeH+WBRkzKuZv6USd6Jkjcg+8w6yGhY:mkn6BLUv59WUi48JVgxEzKulHDg+8wwG
Malware Config
Signatures
-
resource yara_rule static1/unpack002/Keyword Cash Generator.exe upx static1/unpack005/Keyword Cash Generator.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/Keyword Cash Generator.exe unpack005/Keyword Cash Generator.exe
Files
-
31dd2d0f20d96658d01d75103a5654de6da53fdf9b1cbf71efd881d572d499e4.zip.zip
-
Keyword_Cash_Generator/MRR-License.txt
-
Keyword_Cash_Generator/images/_vti_cnf/bg.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/box-with-cds-Large.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/cashgenboxflat.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/cashgenboxlrg.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/cashgenboxmed.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/cashgenboxmini.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/cashgenboxmini2.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/cashgenboxsm.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/cashgenboxsmaller.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/cashgenboxsmallest.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/footer.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/header.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/ob1.jpg
-
Keyword_Cash_Generator/images/_vti_cnf/ob2.jpg
-
Keyword_Cash_Generator/images/bg.jpg.jpg
-
Keyword_Cash_Generator/images/box-with-cds-Large.jpg.jpg
-
Keyword_Cash_Generator/images/cashgenboxflat.jpg.jpg
-
Keyword_Cash_Generator/images/cashgenboxlrg.jpg.jpg
-
Keyword_Cash_Generator/images/cashgenboxmed.jpg.jpg
-
Keyword_Cash_Generator/images/cashgenboxmini.jpg.jpg
-
Keyword_Cash_Generator/images/cashgenboxmini2.jpg.jpg
-
Keyword_Cash_Generator/images/cashgenboxsm.jpg.jpg
-
Keyword_Cash_Generator/images/cashgenboxsmaller.jpg.jpg
-
Keyword_Cash_Generator/images/cashgenboxsmallest.jpg.jpg
-
Keyword_Cash_Generator/images/footer.jpg
-
Keyword_Cash_Generator/images/guarantee/30dayguar1.jpg.jpg
-
Keyword_Cash_Generator/images/guarantee/30dayguar1sm.jpg.jpg
-
Keyword_Cash_Generator/images/guarantee/30dayguar2.jpg.jpg
-
Keyword_Cash_Generator/images/guarantee/30dayguar2sm.jpg.jpg
-
Keyword_Cash_Generator/images/guarantee/60dayguar1.jpg.jpg
-
Keyword_Cash_Generator/images/guarantee/60dayguar1sm.jpg.jpg
-
Keyword_Cash_Generator/images/guarantee/60dayguar2.jpg.jpg
-
Keyword_Cash_Generator/images/guarantee/60dayguar2sm.jpg.jpg
-
Keyword_Cash_Generator/images/guarantee/90dayguar1.jpg.jpg
-
Keyword_Cash_Generator/images/guarantee/90dayguar1sm.jpg.jpg
-
Keyword_Cash_Generator/images/guarantee/90dayguar2.jpg.jpg
-
Keyword_Cash_Generator/images/guarantee/90dayguar2sm.jpg.jpg
-
Keyword_Cash_Generator/images/guarantee/Thumbs.db
-
Keyword_Cash_Generator/images/guarantee/_vti_cnf/90dayguar2sm.jpg
-
Keyword_Cash_Generator/images/header.jpg
-
Keyword_Cash_Generator/images/ob1.jpg.jpg
-
Keyword_Cash_Generator/images/ob2.jpg.jpg
-
Keyword_Cash_Generator/index.html.html
-
Keyword_Cash_Generator/kcg_mrr/KCGenerator.zip.zip
-
Keyword Cash Generator.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 536KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 434KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Keyword_Cash_Generator/kcg_mrr/Resellers.zip.zip
-
MRR-License.txt
-
images/_vti_cnf/bg.jpg
-
images/_vti_cnf/box-with-cds-Large.jpg
-
images/_vti_cnf/cashgenboxflat.jpg
-
images/_vti_cnf/cashgenboxlrg.jpg
-
images/_vti_cnf/cashgenboxmed.jpg
-
images/_vti_cnf/cashgenboxmini.jpg
-
images/_vti_cnf/cashgenboxmini2.jpg
-
images/_vti_cnf/cashgenboxsm.jpg
-
images/_vti_cnf/cashgenboxsmaller.jpg
-
images/_vti_cnf/cashgenboxsmallest.jpg
-
images/_vti_cnf/footer.jpg
-
images/_vti_cnf/header.jpg
-
images/_vti_cnf/ob1.jpg
-
images/_vti_cnf/ob2.jpg
-
images/bg.jpg.jpg
-
images/box-with-cds-Large.jpg.jpg
-
images/cashgenboxflat.jpg.jpg
-
images/cashgenboxlrg.jpg.jpg
-
images/cashgenboxmed.jpg.jpg
-
images/cashgenboxmini.jpg.jpg
-
images/cashgenboxmini2.jpg.jpg
-
images/cashgenboxsm.jpg.jpg
-
images/cashgenboxsmaller.jpg.jpg
-
images/cashgenboxsmallest.jpg.jpg
-
images/footer.jpg
-
images/guarantee/30dayguar1.jpg.jpg
-
images/guarantee/30dayguar1sm.jpg.jpg
-
images/guarantee/30dayguar2.jpg.jpg
-
images/guarantee/30dayguar2sm.jpg.jpg
-
images/guarantee/60dayguar1.jpg.jpg
-
images/guarantee/60dayguar1sm.jpg.jpg
-
images/guarantee/60dayguar2.jpg.jpg
-
images/guarantee/60dayguar2sm.jpg.jpg
-
images/guarantee/90dayguar1.jpg.jpg
-
images/guarantee/90dayguar1sm.jpg.jpg
-
images/guarantee/90dayguar2.jpg.jpg
-
images/guarantee/90dayguar2sm.jpg.jpg
-
images/guarantee/Thumbs.db
-
images/guarantee/_vti_cnf/90dayguar2sm.jpg
-
images/header.jpg
-
images/ob1.jpg.jpg
-
images/ob2.jpg.jpg
-
index.html.html
-
kcg_mrr/KCGenerator.zip.zip
-
Keyword Cash Generator.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 536KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 434KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
success.html.html
-
Keyword_Cash_Generator/success.html.html