Overview
overview
4Static
static
1welcomeToThePark.zip
windows7-x64
1welcomeToThePark.zip
windows10-2004-x64
1__MACOSX/w..._store
windows7-x64
3__MACOSX/w..._store
windows10-2004-x64
3__MACOSX/w...me.app
macos-10.15-amd64
1__MACOSX/w...er.ico
windows7-x64
3__MACOSX/w...er.ico
windows10-2004-x64
3__MACOSX/w...applet
windows7-x64
3__MACOSX/w...applet
windows10-2004-x64
3__MACOSX/w...ommand
windows7-x64
3__MACOSX/w...ommand
windows10-2004-x64
3__MACOSX/w...n.scpt
macos-10.15-amd64
1welcome/.ds_store
windows7-x64
3welcome/.ds_store
windows10-2004-x64
3welcome/.h...hePark
macos-10.15-amd64
1welcome/Ch...fo.xml
windows7-x64
1welcome/Ch...fo.xml
windows10-2004-x64
1welcome/Ch...applet
macos-10.15-amd64
1welcome/Ch...kgInfo
windows7-x64
1welcome/Ch...kgInfo
windows10-2004-x64
1welcome/Ch...n.scpt
macos-10.15-amd64
1welcome/Ch...t.icns
windows7-x64
3welcome/Ch...t.icns
windows10-2004-x64
3welcome/Ch...t.rsrc
windows7-x64
3welcome/Ch...t.rsrc
windows10-2004-x64
3welcome/Ch...XT.rtf
windows7-x64
4welcome/Ch...XT.rtf
windows10-2004-x64
1welcome/Ch...ommand
ubuntu-18.04-amd64
1welcome/Ch...ommand
debian-9-armhf
1welcome/Ch...ommand
debian-9-mips
1welcome/Ch...ommand
debian-9-mipsel
1welcome/Ch...er.png
windows7-x64
3Static task
static1
Behavioral task
behavioral1
Sample
welcomeToThePark.zip
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
welcomeToThePark.zip
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
__MACOSX/welcome/._.ds_store
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
__MACOSX/welcome/._.ds_store
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
__MACOSX/welcome/._Chrome.app
Resource
macos-20220504-en
Behavioral task
behavioral6
Sample
__MACOSX/welcome/Chrome.app/._FlashPlayer.ico
Resource
win7-20231020-en
Behavioral task
behavioral7
Sample
__MACOSX/welcome/Chrome.app/._FlashPlayer.ico
Resource
win10v2004-20231020-en
Behavioral task
behavioral8
Sample
__MACOSX/welcome/Chrome.app/Contents/MacOS/._applet
Resource
win7-20231020-en
Behavioral task
behavioral9
Sample
__MACOSX/welcome/Chrome.app/Contents/MacOS/._applet
Resource
win10v2004-20230915-en
Behavioral task
behavioral10
Sample
__MACOSX/welcome/Chrome.app/Contents/Resources/._interesting_thing.command
Resource
win7-20231020-en
Behavioral task
behavioral11
Sample
__MACOSX/welcome/Chrome.app/Contents/Resources/._interesting_thing.command
Resource
win10v2004-20231020-en
Behavioral task
behavioral12
Sample
__MACOSX/welcome/Chrome.app/Contents/Resources/Scripts/._main.scpt
Resource
macos-20230831-en
Behavioral task
behavioral13
Sample
welcome/.ds_store
Resource
win7-20231020-en
Behavioral task
behavioral14
Sample
welcome/.ds_store
Resource
win10v2004-20231020-en
Behavioral task
behavioral15
Sample
welcome/.hidden/welcomeToThePark
Resource
macos-20220504-en
Behavioral task
behavioral16
Sample
welcome/Chrome.app/Contents/Info.xml
Resource
win7-20231020-en
Behavioral task
behavioral17
Sample
welcome/Chrome.app/Contents/Info.xml
Resource
win10v2004-20230915-en
Behavioral task
behavioral18
Sample
welcome/Chrome.app/Contents/MacOS/applet
Resource
macos-20220504-en
Behavioral task
behavioral19
Sample
welcome/Chrome.app/Contents/PkgInfo
Resource
win7-20231020-en
Behavioral task
behavioral20
Sample
welcome/Chrome.app/Contents/PkgInfo
Resource
win10v2004-20231020-en
Behavioral task
behavioral21
Sample
welcome/Chrome.app/Contents/Resources/Scripts/main.scpt
Resource
macos-20220504-en
Behavioral task
behavioral22
Sample
welcome/Chrome.app/Contents/Resources/applet.icns
Resource
win7-20231020-en
Behavioral task
behavioral23
Sample
welcome/Chrome.app/Contents/Resources/applet.icns
Resource
win10v2004-20231020-en
Behavioral task
behavioral24
Sample
welcome/Chrome.app/Contents/Resources/applet.rsrc
Resource
win7-20231020-en
Behavioral task
behavioral25
Sample
welcome/Chrome.app/Contents/Resources/applet.rsrc
Resource
win10v2004-20231020-en
Behavioral task
behavioral26
Sample
welcome/Chrome.app/Contents/Resources/description.rtfd/TXT.rtf
Resource
win7-20231020-en
Behavioral task
behavioral27
Sample
welcome/Chrome.app/Contents/Resources/description.rtfd/TXT.rtf
Resource
win10v2004-20230915-en
Behavioral task
behavioral28
Sample
welcome/Chrome.app/Contents/Resources/interesting_thing.command
Resource
ubuntu1804-amd64-20231020-en
Behavioral task
behavioral29
Sample
welcome/Chrome.app/Contents/Resources/interesting_thing.command
Resource
debian9-armhf-20231020-en
Behavioral task
behavioral30
Sample
welcome/Chrome.app/Contents/Resources/interesting_thing.command
Resource
debian9-mipsbe-20231020-en
Behavioral task
behavioral31
Sample
welcome/Chrome.app/Contents/Resources/interesting_thing.command
Resource
debian9-mipsel-20231020-en
Behavioral task
behavioral32
Sample
welcome/Chrome.app/FlashPlayer.png
Resource
win7-20231020-en
General
-
Target
welcomeToThePark.zip
-
Size
1.2MB
-
MD5
9a9ffa7418b010e45d8c6049217425a7
-
SHA1
75b23349af3ce19bbe19a8aba3095b83344a181e
-
SHA256
a03b73ee6f70bdb083ca96f06a6a601494d9f67772e10b75e90362731e959c67
-
SHA512
90ca2cc6ae5e3c9b4b336a727046de0809e5e1c82b01ce0e73b1692b22bd9a6cb059af7ad8b91409c9b65b6fd1b99cc217f4ec71f3696efaef06ebec3a455960
-
SSDEEP
24576:7EDQIaCA7ey1C7ltYxPgUyd8RDtgxPeld0n9BZWAGxgK/xhPmwrUc8FoG8:7aQJXvC5tCgN8Ft6enkPzc/mwSC
Malware Config
Signatures
Files
-
welcomeToThePark.zip.zip
Password: infected
-
__MACOSX/welcome/._.DS_Store
-
__MACOSX/welcome/._Chrome.app
-
__MACOSX/welcome/Chrome.app/._FlashPlayer.ico
-
__MACOSX/welcome/Chrome.app/._Icon
-
__MACOSX/welcome/Chrome.app/Contents/MacOS/._applet
-
__MACOSX/welcome/Chrome.app/Contents/Resources/._interesting_thing.command
-
__MACOSX/welcome/Chrome.app/Contents/Resources/Scripts/._main.scpt
-
welcome/.DS_Store
-
welcome/.hidden/welcomeToThePark.macho macos
-
welcome/Chrome.app/Contents/Info.plist.xml
-
welcome/Chrome.app/Contents/MacOS/applet.macho macos
-
welcome/Chrome.app/Contents/PkgInfo
-
welcome/Chrome.app/Contents/Resources/Scripts/main.scpt.scpt macos
-
welcome/Chrome.app/Contents/Resources/applet.icns
-
welcome/Chrome.app/Contents/Resources/applet.rsrc
-
welcome/Chrome.app/Contents/Resources/description.rtfd/TXT.rtf.rtf
-
welcome/Chrome.app/Contents/Resources/interesting_thing.command.sh linux
-
welcome/Chrome.app/FlashPlayer.ico.png