Overview

overview

4

Static

static

1

Documentat...t.docx

windows7-x64

4

Documentat...t.docx

windows10-2004-x64

1

Documentat...L.xlsx

windows7-x64

1

Documentat...L.xlsx

windows10-2004-x64

1

Documentat...9.xlsx

windows7-x64

1

Documentat...9.xlsx

windows10-2004-x64

1

Documentat...9.xlsx

windows7-x64

1

Documentat...9.xlsx

windows10-2004-x64

1

GP Reports...ter.js

windows7-x64

1

GP Reports...ter.js

windows10-2004-x64

1

GP Reports...ser.js

windows7-x64

1

GP Reports...ser.js

windows10-2004-x64

1

GP Reports...ker.js

windows7-x64

1

GP Reports...ker.js

windows10-2004-x64

1

GP Reports...ter.js

windows7-x64

1

GP Reports...ter.js

windows10-2004-x64

1

GP Reports...ser.js

windows7-x64

1

GP Reports...ser.js

windows10-2004-x64

1

GP Reports...rus.js

windows7-x64

1

GP Reports...rus.js

windows10-2004-x64

1

GP Reports...ity.js

windows7-x64

1

GP Reports...ity.js

windows10-2004-x64

1

GP Reports...ard.js

windows7-x64

1

GP Reports...ard.js

windows10-2004-x64

1

GP Reports...ity.js

windows7-x64

1

GP Reports...ity.js

windows10-2004-x64

1

GP Reports...ler.js

windows7-x64

1

GP Reports...ler.js

windows10-2004-x64

1

GP Reports...ver.js

windows7-x64

1

GP Reports...ver.js

windows10-2004-x64

1

Scripts/Ba...rt.ps1

windows7-x64

1

Scripts/Ba...rt.ps1

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc8c0c7fb60fdd1e5d737ea52662ac427af9cd16ed6b297e73bdde76d7ca2c0b.zip.zip

  • Size

    1.2MB

  • MD5

    e406660e143fb545a79ffc07bfda6213

  • SHA1

    16d20cf9e94d8d39952fecd5f2fb5f2ffcae0f37

  • SHA256

    676a895500f2cf5bc1458b01841abfecaf0848f1b754c4d201669e5bd476094f

  • SHA512

    c827adda45e34242db773edf885fdd5c5b40ad21763f45888116e39ead0691e86915dc38822cba37f7fa4b3c64fa31400cbde37b10528b7044b79fa925fccccf

  • SSDEEP

    24576:OYbGoMhr6O4PhqNtMZRPL3UGAwMYDHeXnby7NsyY7YecigS:OFB6Oq0CT3jAsiXGGyYvgS

Score
1/10

Malware Config

Signatures

Files

  • fc8c0c7fb60fdd1e5d737ea52662ac427af9cd16ed6b297e73bdde76d7ca2c0b.zip.zip
    .zip

    Password: infected

  • fc8c0c7fb60fdd1e5d737ea52662ac427af9cd16ed6b297e73bdde76d7ca2c0b.zip
    .zip
  • Documentation/Announcement.docx
    .docx office2007
  • Documentation/BaselineDiffs-to-v1909-19H2-FINAL.xlsx
    .xlsx office2007
  • Documentation/MS Security Baseline Windows 10 v1909 and Server v1909.xlsx
    .xlsx office2007
  • Documentation/MSFT-WS v1909-DomainController-FINAL.PolicyRules
  • Documentation/MSFT-WS v1909-MemberServer-FINAL.PolicyRules
  • Documentation/MSFT-Win10-WS-v1909-FINAL.PolicyRules
  • Documentation/MSFT-Win10-v1909-FINAL.PolicyRules
  • Documentation/New settings in Windows v1909.xlsx
    .xlsx office2007
  • GP Reports/MSFT Internet Explorer 11 - Computer.htm
    .js
  • GP Reports/MSFT Internet Explorer 11 - User.htm
    .js
  • GP Reports/MSFT Windows 10 1909 - BitLocker.htm
    .js
  • GP Reports/MSFT Windows 10 1909 - Computer.htm
    .js
  • GP Reports/MSFT Windows 10 1909 - User.htm
    .js
  • GP Reports/MSFT Windows 10 1909 and Server 1909 - Defender Antivirus.htm
    .js
  • GP Reports/MSFT Windows 10 1909 and Server 1909 - Domain Security.htm
    .js
  • GP Reports/MSFT Windows 10 1909 and Server 1909 Member Server - Credential Guard.htm
    .js
  • GP Reports/MSFT Windows Server 1909 - Domain Controller Virtualization Based Security.htm
    .js
  • GP Reports/MSFT Windows Server 1909 - Domain Controller.htm
    .js
  • GP Reports/MSFT Windows Server 1909 - Member Server.htm
    .js
  • GPOs/manifest.xml
  • GPOs/{159ECA05-4C14-4DE4-94FE-578543473D7C}/Backup.xml
    .xml
  • GPOs/{159ECA05-4C14-4DE4-94FE-578543473D7C}/DomainSysvol/GPO/Machine/comment.cmtx
  • GPOs/{159ECA05-4C14-4DE4-94FE-578543473D7C}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf
  • GPOs/{159ECA05-4C14-4DE4-94FE-578543473D7C}/DomainSysvol/GPO/Machine/registry.pol
  • GPOs/{159ECA05-4C14-4DE4-94FE-578543473D7C}/bkupInfo.xml
  • GPOs/{159ECA05-4C14-4DE4-94FE-578543473D7C}/gpreport.xml
  • GPOs/{3657C7A2-3FF3-4C21-9439-8FDF549F1D68}/Backup.xml
    .xml
  • GPOs/{3657C7A2-3FF3-4C21-9439-8FDF549F1D68}/DomainSysvol/GPO/Machine/comment.cmtx
  • GPOs/{3657C7A2-3FF3-4C21-9439-8FDF549F1D68}/DomainSysvol/GPO/Machine/microsoft/windows nt/Audit/audit.csv
  • GPOs/{3657C7A2-3FF3-4C21-9439-8FDF549F1D68}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf
  • GPOs/{3657C7A2-3FF3-4C21-9439-8FDF549F1D68}/DomainSysvol/GPO/Machine/registry.pol
  • GPOs/{3657C7A2-3FF3-4C21-9439-8FDF549F1D68}/DomainSysvol/GPO/User/comment.cmtx
  • GPOs/{3657C7A2-3FF3-4C21-9439-8FDF549F1D68}/DomainSysvol/GPO/User/registry.pol
  • GPOs/{3657C7A2-3FF3-4C21-9439-8FDF549F1D68}/bkupInfo.xml
  • GPOs/{3657C7A2-3FF3-4C21-9439-8FDF549F1D68}/gpreport.xml
  • GPOs/{45CA52BB-19DE-487A-9CE8-0A95B18F6054}/Backup.xml
    .xml
  • GPOs/{45CA52BB-19DE-487A-9CE8-0A95B18F6054}/DomainSysvol/GPO/User/comment.cmtx
  • GPOs/{45CA52BB-19DE-487A-9CE8-0A95B18F6054}/DomainSysvol/GPO/User/registry.pol
  • GPOs/{45CA52BB-19DE-487A-9CE8-0A95B18F6054}/bkupInfo.xml
  • GPOs/{45CA52BB-19DE-487A-9CE8-0A95B18F6054}/gpreport.xml
  • GPOs/{4E60D2FB-5E65-4AAB-843E-836833DEFA15}/Backup.xml
    .xml
  • GPOs/{4E60D2FB-5E65-4AAB-843E-836833DEFA15}/DomainSysvol/GPO/User/comment.cmtx
  • GPOs/{4E60D2FB-5E65-4AAB-843E-836833DEFA15}/DomainSysvol/GPO/User/registry.pol
  • GPOs/{4E60D2FB-5E65-4AAB-843E-836833DEFA15}/bkupInfo.xml
  • GPOs/{4E60D2FB-5E65-4AAB-843E-836833DEFA15}/gpreport.xml
  • GPOs/{6359FA45-B4E8-4B56-864A-591B4DD8642C}/Backup.xml
    .xml
  • GPOs/{6359FA45-B4E8-4B56-864A-591B4DD8642C}/DomainSysvol/GPO/Machine/comment.cmtx
  • GPOs/{6359FA45-B4E8-4B56-864A-591B4DD8642C}/DomainSysvol/GPO/Machine/registry.pol
  • GPOs/{6359FA45-B4E8-4B56-864A-591B4DD8642C}/bkupInfo.xml
  • GPOs/{6359FA45-B4E8-4B56-864A-591B4DD8642C}/gpreport.xml
  • GPOs/{6458B19A-73D5-4F93-8841-DA93A72F18F5}/Backup.xml
    .xml
  • GPOs/{6458B19A-73D5-4F93-8841-DA93A72F18F5}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf
  • GPOs/{6458B19A-73D5-4F93-8841-DA93A72F18F5}/bkupInfo.xml
  • GPOs/{6458B19A-73D5-4F93-8841-DA93A72F18F5}/gpreport.xml
  • GPOs/{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}/Backup.xml
    .xml
  • GPOs/{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}/DomainSysvol/GPO/Machine/comment.cmtx
  • GPOs/{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf
  • GPOs/{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}/DomainSysvol/GPO/Machine/registry.pol
  • GPOs/{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}/bkupInfo.xml
  • GPOs/{6E2073CE-B1B5-4A0F-B1E4-C007BD052B18}/gpreport.xml
  • GPOs/{ABC66265-8884-49F9-9621-0213E3566A6B}/Backup.xml
    .xml
  • GPOs/{ABC66265-8884-49F9-9621-0213E3566A6B}/DomainSysvol/GPO/Machine/comment.cmtx
  • GPOs/{ABC66265-8884-49F9-9621-0213E3566A6B}/DomainSysvol/GPO/Machine/microsoft/windows nt/Audit/audit.csv
  • GPOs/{ABC66265-8884-49F9-9621-0213E3566A6B}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf
  • GPOs/{ABC66265-8884-49F9-9621-0213E3566A6B}/DomainSysvol/GPO/Machine/registry.pol
  • GPOs/{ABC66265-8884-49F9-9621-0213E3566A6B}/DomainSysvol/GPO/User/comment.cmtx
  • GPOs/{ABC66265-8884-49F9-9621-0213E3566A6B}/DomainSysvol/GPO/User/registry.pol
  • GPOs/{ABC66265-8884-49F9-9621-0213E3566A6B}/bkupInfo.xml
  • GPOs/{ABC66265-8884-49F9-9621-0213E3566A6B}/gpreport.xml
  • GPOs/{BA64EEBE-B4EC-47F2-BED8-C53274D6CDF2}/Backup.xml
    .xml
  • GPOs/{BA64EEBE-B4EC-47F2-BED8-C53274D6CDF2}/DomainSysvol/GPO/Machine/comment.cmtx
  • GPOs/{BA64EEBE-B4EC-47F2-BED8-C53274D6CDF2}/DomainSysvol/GPO/Machine/registry.pol
  • GPOs/{BA64EEBE-B4EC-47F2-BED8-C53274D6CDF2}/bkupInfo.xml
  • GPOs/{BA64EEBE-B4EC-47F2-BED8-C53274D6CDF2}/gpreport.xml
  • GPOs/{C9E694FF-5E05-4838-8692-5A3F575F3BFC}/Backup.xml
    .xml
  • GPOs/{C9E694FF-5E05-4838-8692-5A3F575F3BFC}/DomainSysvol/GPO/Machine/comment.cmtx
  • GPOs/{C9E694FF-5E05-4838-8692-5A3F575F3BFC}/DomainSysvol/GPO/Machine/registry.pol
  • GPOs/{C9E694FF-5E05-4838-8692-5A3F575F3BFC}/bkupInfo.xml
  • GPOs/{C9E694FF-5E05-4838-8692-5A3F575F3BFC}/gpreport.xml
  • GPOs/{ECA4D7B0-93B4-47C2-BC43-8AC523D4D75E}/Backup.xml
    .xml
  • GPOs/{ECA4D7B0-93B4-47C2-BC43-8AC523D4D75E}/DomainSysvol/GPO/Machine/comment.cmtx
  • GPOs/{ECA4D7B0-93B4-47C2-BC43-8AC523D4D75E}/DomainSysvol/GPO/Machine/microsoft/windows nt/Audit/audit.csv
  • GPOs/{ECA4D7B0-93B4-47C2-BC43-8AC523D4D75E}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf
  • GPOs/{ECA4D7B0-93B4-47C2-BC43-8AC523D4D75E}/DomainSysvol/GPO/Machine/registry.pol
  • GPOs/{ECA4D7B0-93B4-47C2-BC43-8AC523D4D75E}/bkupInfo.xml
  • GPOs/{ECA4D7B0-93B4-47C2-BC43-8AC523D4D75E}/gpreport.xml
  • Scripts/Baseline-ADImport.ps1
  • Scripts/Baseline-LocalInstall.ps1
    .ps1
  • Scripts/ConfigFiles/DeltaForNonDomainJoined.inf
  • Scripts/ConfigFiles/DeltaForNonDomainJoined.txt
  • Scripts/ConfigFiles/EP-reset.xml
  • Scripts/Remove-EPBaselineSettings.ps1
  • Scripts/Tools/LGPO.txt
  • Scripts/Tools/MapGuidsToGpoNames.ps1
    .ps1
  • Templates/AdmPwd.adml
  • Templates/AdmPwd.admx
  • Templates/MSS-legacy.adml
  • Templates/MSS-legacy.admx
  • Templates/SecGuide.adml
    .xml
  • Templates/SecGuide.admx
    .xml