Behavioral task
behavioral1
Sample
⮬᪨ த/Autosales.bat
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
⮬᪨ த/Autosales.bat
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
⮬᪨ த/Shortcut to Autosales.bat.lnk
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
⮬᪨ த/Shortcut to Autosales.bat.lnk
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
⮬᪨ த/⮏த.exe
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
⮬᪨ த/⮏த.exe
Resource
win10v2004-20231023-en
General
-
Target
2d9958f0c62780539ecd8386024fbff54d09780c59a55e6d50a5fabbb263f9a0.zip.zip
-
Size
387KB
-
MD5
fa19a787af4d5fcd46b69c7dab9a4eaa
-
SHA1
f58ea2997a3a2fdaa2164ac957d7cd003adbbe0e
-
SHA256
424d5303c334ff99cd803fb459ef74841c50637732d314d89b2e7742d6f54725
-
SHA512
c7d43f70641d131c2d1a3d8bdae4aa4ac3bc1522791151acd00c5b7a3a8786eba8e6263975b947e3ffb206cc3d276a8bc74fc67a30851ee5fae73c248ff1d733
-
SSDEEP
12288:lbkOl7k+1nKGiTFVnfTNs/taOPiH5VEmsZ:lYG1KGiTHyEjE7Z
Malware Config
Signatures
-
resource yara_rule static1/unpack002/⮬᪨ த/⮏த.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/⮬᪨ த/⮏த.exe
Files
-
2d9958f0c62780539ecd8386024fbff54d09780c59a55e6d50a5fabbb263f9a0.zip.zip.zip
Password: infected
-
2d9958f0c62780539ecd8386024fbff54d09780c59a55e6d50a5fabbb263f9a0.zip.zip
-
⮬᪨ த/20181219.2.txt
-
⮬᪨ த/20181219.txt
-
⮬᪨ த/20190130.txt
-
⮬᪨ த/20190227.txt
-
⮬᪨ த/20190327.txt
-
⮬᪨ த/20190624.txt
-
⮬᪨ த/20190725.txt
-
⮬᪨ த/20190820.txt
-
⮬᪨ த/20190923.txt
-
⮬᪨ த/20191023.txt
-
⮬᪨ த/20191125.txt
-
⮬᪨ த/20191223.txt
-
⮬᪨ த/20200103.txt
-
⮬᪨ த/20200127.txt
-
⮬᪨ த/20200203.txt
-
⮬᪨ த/20200225.txt
-
⮬᪨ த/20200303.txt
-
⮬᪨ த/20200324.txt
-
⮬᪨ த/20200403.txt
-
⮬᪨ த/20200424.txt
-
⮬᪨ த/20200426.txt
-
⮬᪨ த/20200503.txt
-
⮬᪨ த/20200522.txt
-
⮬᪨ த/20200526.txt
-
⮬᪨ த/20200603.txt
-
⮬᪨ த/20200623.txt
-
⮬᪨ த/20200626.txt
-
⮬᪨ த/20200703.txt
-
⮬᪨ த/20200723.txt
-
⮬᪨ த/20200726.txt
-
⮬᪨ த/20200803.txt
-
⮬᪨ த/20200824.txt
-
⮬᪨ த/20200826.txt
-
⮬᪨ த/20200903.txt
-
⮬᪨ த/20200924.txt
-
⮬᪨ த/20200926.txt
-
⮬᪨ த/20201003.txt
-
⮬᪨ த/20201026.txt
-
⮬᪨ த/20201103.txt
-
⮬᪨ த/20201126.txt
-
⮬᪨ த/20201203.txt
-
⮬᪨ த/20201226.txt
-
⮬᪨ த/Autosales.bat
-
⮬᪨ த/Shortcut to Autosales.bat.lnk.lnk
-
⮬᪨ த/tmp.txt
-
⮬᪨ த/⮏த.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 628KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 358KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE