Overview
overview
10Static
static
7demo/1.exe
windows7-x64
7demo/1.exe
windows10-1703-x64
7demo/1.exe
windows10-2004-x64
7out.exe
windows7-x64
out.exe
windows10-1703-x64
out.exe
windows10-2004-x64
demo/2.exe
windows7-x64
7demo/2.exe
windows10-1703-x64
7demo/2.exe
windows10-2004-x64
7out.exe
windows7-x64
out.exe
windows10-1703-x64
out.exe
windows10-2004-x64
demo/3.exe
windows7-x64
7demo/3.exe
windows10-1703-x64
7demo/3.exe
windows10-2004-x64
7out.exe
windows7-x64
out.exe
windows10-1703-x64
out.exe
windows10-2004-x64
demo/4.exe
windows7-x64
7demo/4.exe
windows10-1703-x64
7demo/4.exe
windows10-2004-x64
7out.exe
windows7-x64
out.exe
windows10-1703-x64
out.exe
windows10-2004-x64
demo/f2.bat
windows7-x64
10demo/f2.bat
windows10-1703-x64
10demo/f2.bat
windows10-2004-x64
10General
-
Target
demo.7z
-
Size
3.8MB
-
Sample
231112-nrc96aff78
-
MD5
c187a67964317906c0ca397fee23edb0
-
SHA1
5cd31001fe8304f4171d2eabff6e83db265cb967
-
SHA256
596896cccc33940457c3b7067409a69279c5fadd8a442f72d01f9cfd53ac777c
-
SHA512
4e0fd27d680a4857feae2aebcaa49690702eee391d90f24fdc66832a569f8a59111a03bbba48e6f0b2bb7cdfb8de19a56e8ecaee994099990ec147877ba1e7db
-
SSDEEP
98304:T6TP0yqAerg5QxLzEHZorJC1bnY36cL1YSmxmJjEPqjJE+tm:T6hAJIHZxSSx0YPqj21
Behavioral task
behavioral1
Sample
demo/1.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
demo/1.exe
Resource
win10-20231020-en
Behavioral task
behavioral3
Sample
demo/1.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral4
Sample
out.exe
Resource
win7-20231023-en
Behavioral task
behavioral5
Sample
out.exe
Resource
win10-20231020-en
Behavioral task
behavioral6
Sample
out.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral7
Sample
demo/2.exe
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
demo/2.exe
Resource
win10-20231023-en
Behavioral task
behavioral9
Sample
demo/2.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral10
Sample
out.exe
Resource
win7-20231025-en
Behavioral task
behavioral11
Sample
out.exe
Resource
win10-20231020-en
Behavioral task
behavioral12
Sample
out.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral13
Sample
demo/3.exe
Resource
win7-20231020-en
Behavioral task
behavioral14
Sample
demo/3.exe
Resource
win10-20231020-en
Behavioral task
behavioral15
Sample
demo/3.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral16
Sample
out.exe
Resource
win7-20231023-en
Behavioral task
behavioral17
Sample
out.exe
Resource
win10-20231020-en
Behavioral task
behavioral18
Sample
out.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
demo/4.exe
Resource
win7-20231020-en
Behavioral task
behavioral20
Sample
demo/4.exe
Resource
win10-20231020-en
Behavioral task
behavioral21
Sample
demo/4.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral22
Sample
out.exe
Resource
win7-20231020-en
Behavioral task
behavioral23
Sample
out.exe
Resource
win10-20231023-en
Behavioral task
behavioral24
Sample
out.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral25
Sample
demo/f2.bat
Resource
win7-20231020-en
Behavioral task
behavioral26
Sample
demo/f2.bat
Resource
win10-20231020-en
Behavioral task
behavioral27
Sample
demo/f2.bat
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
demo/1.exe
-
Size
4.6MB
-
MD5
214d097d63c0aa20ae2a833518c583a1
-
SHA1
80469c357a3d80da20d3d6053370ee011663c7c0
-
SHA256
a72cd6dcf20df1725db00b53e95a35cc02490a974845b2f0e45db94d85eb69ff
-
SHA512
11ddd9b82672a6d7bcefb343f661de53325735ac63799c8069c9f3a1167f1abb2a40dd7a678bbf7c6e789aee9a384dabbf905d5069198e746416b7f21fc0550d
-
SSDEEP
98304:nAxfEfPkvm2ysI39biVhWo0tOUHu345hsMXWrGCTFY:nQfBisDhWo0tOUHh
Score7/10 -
-
-
Target
out.upx
-
Size
6.3MB
-
MD5
eda694708a477386f90406bbdd7a3abe
-
SHA1
101aebe600eb7ed268b3ee9321ffc16cc5e20772
-
SHA256
91763ff97cf1df16641de271312fdaeb7eceaaaf4df06059f48d418f66d12d5f
-
SHA512
2f3ef2d440dd343a629c1f11951e2452ccb6cac0b23d3578afacf5b226c93267df0043ab72da15485f62d5c76bf0117fb43ed0913177fcaf60ea17e32bc940fa
-
SSDEEP
49152:oGcFrDX6WjmODKBx3ATq+kVwAsOdldE85Ev3JQJ+eYyyiGtlqOhubIU6iiM3wCYe:qqOOFldE52J+eP++iMA0brOm+rt41Xd
Score1/10 -
-
-
Target
demo/2.exe
-
Size
4.6MB
-
MD5
214d097d63c0aa20ae2a833518c583a1
-
SHA1
80469c357a3d80da20d3d6053370ee011663c7c0
-
SHA256
a72cd6dcf20df1725db00b53e95a35cc02490a974845b2f0e45db94d85eb69ff
-
SHA512
11ddd9b82672a6d7bcefb343f661de53325735ac63799c8069c9f3a1167f1abb2a40dd7a678bbf7c6e789aee9a384dabbf905d5069198e746416b7f21fc0550d
-
SSDEEP
98304:nAxfEfPkvm2ysI39biVhWo0tOUHu345hsMXWrGCTFY:nQfBisDhWo0tOUHh
Score7/10 -
-
-
Target
out.upx
-
Size
6.3MB
-
MD5
eda694708a477386f90406bbdd7a3abe
-
SHA1
101aebe600eb7ed268b3ee9321ffc16cc5e20772
-
SHA256
91763ff97cf1df16641de271312fdaeb7eceaaaf4df06059f48d418f66d12d5f
-
SHA512
2f3ef2d440dd343a629c1f11951e2452ccb6cac0b23d3578afacf5b226c93267df0043ab72da15485f62d5c76bf0117fb43ed0913177fcaf60ea17e32bc940fa
-
SSDEEP
49152:oGcFrDX6WjmODKBx3ATq+kVwAsOdldE85Ev3JQJ+eYyyiGtlqOhubIU6iiM3wCYe:qqOOFldE52J+eP++iMA0brOm+rt41Xd
Score1/10 -
-
-
Target
demo/3.exe
-
Size
4.6MB
-
MD5
c82121875584b5607f9d8a9c5c10889a
-
SHA1
4bc0ed52931c44261aa1d40c42d01255427c683b
-
SHA256
01d4ced698c9826e5879e235a74bab2b794e85df04b3c693345ef1925a20aeb9
-
SHA512
3d0086dd2f520721f18123ef7ae93ef29613282a3b15a51024535170c04c5dea3be96f05a2bd09860acfe1bc1c4b7cead2c67a5b04783c71ecf6a62b7ac4a17e
-
SSDEEP
98304:8PXlkUBvBfVFKea3IxoSLdtOUHu345hsMXWruBhW2:8PyUB9G7YxLdtOUHP
Score7/10 -
-
-
Target
out.upx
-
Size
6.3MB
-
MD5
904783080daedc040acf21adb204a1a1
-
SHA1
02907f04b5ca0f67f61f1b6f0daa2a7b92092fb9
-
SHA256
30ac558be0a53819aeec30714f34fd68a4cc68f602e66f97200cb7c920b71aaa
-
SHA512
02dc7c474e9e5d95628c772408bd9222f17d8889af4fbaa677b31f37b88689528b5494105c59f36d3809e9514b9dd519ddac7a8f3e0592de04e0d2d6ca9113cd
-
SSDEEP
98304:/XTPACa0cMIdwa+e/A+U4Rz9h7+23bochWj48DbM:O0VuAD4rd0
Score1/10 -
-
-
Target
demo/4.exe
-
Size
4.6MB
-
MD5
c82121875584b5607f9d8a9c5c10889a
-
SHA1
4bc0ed52931c44261aa1d40c42d01255427c683b
-
SHA256
01d4ced698c9826e5879e235a74bab2b794e85df04b3c693345ef1925a20aeb9
-
SHA512
3d0086dd2f520721f18123ef7ae93ef29613282a3b15a51024535170c04c5dea3be96f05a2bd09860acfe1bc1c4b7cead2c67a5b04783c71ecf6a62b7ac4a17e
-
SSDEEP
98304:8PXlkUBvBfVFKea3IxoSLdtOUHu345hsMXWruBhW2:8PyUB9G7YxLdtOUHP
Score7/10 -
-
-
Target
out.upx
-
Size
6.3MB
-
MD5
904783080daedc040acf21adb204a1a1
-
SHA1
02907f04b5ca0f67f61f1b6f0daa2a7b92092fb9
-
SHA256
30ac558be0a53819aeec30714f34fd68a4cc68f602e66f97200cb7c920b71aaa
-
SHA512
02dc7c474e9e5d95628c772408bd9222f17d8889af4fbaa677b31f37b88689528b5494105c59f36d3809e9514b9dd519ddac7a8f3e0592de04e0d2d6ca9113cd
-
SSDEEP
98304:/XTPACa0cMIdwa+e/A+U4Rz9h7+23bochWj48DbM:O0VuAD4rd0
Score1/10 -
-
-
Target
demo/f2.bat
-
Size
1KB
-
MD5
91acdfd491f3618bdb8d2af77452a760
-
SHA1
30b096a5411f97eff627a030c2edc5443a6463d6
-
SHA256
c348a9fb81dbb512f495ce92e6c6d389fbfd1ccb18d8c1f5c0668614e04dda09
-
SHA512
a52df5515df3e070ec27686bd4e35882f01f849c4ccb23547bd7a52db9817ec32b4178e5c1d719c03fe630e932a5b930f83fdb485102dcf1ac096508ef40ef01
Score10/10-
Modifies WinLogon for persistence
-