Overview

overview

8

Static

static

8

Ζ�...em.msi

windows7-x64

7

Ζ�...em.msi

windows10-2004-x64

7

Ζ�...ery.js

windows7-x64

1

Ζ�...ery.js

windows10-2004-x64

1

Ζ�.../js.js

windows7-x64

1

Ζ�.../js.js

windows10-2004-x64

1

Ζ�...to.exe

windows7-x64

1

Ζ�...to.exe

windows10-2004-x64

1

Ζ�...ft.exe

windows7-x64

1

Ζ�...ft.exe

windows10-2004-x64

1

Ζ�...ft.xls

windows7-x64

1

Ζ�...ft.xls

windows10-2004-x64

1

Ζ�...t.xlsm

windows7-x64

1

Ζ�...t.xlsm

windows10-2004-x64

1

Ζ�...��.exe

windows7-x64

1

Ζ�...��.exe

windows10-2004-x64

1

Ζ�...��.xls

windows7-x64

1

Ζ�...��.xls

windows10-2004-x64

1

Ζ�...�.xlsm

windows7-x64

1

Ζ�...�.xlsm

windows10-2004-x64

1

Ζ�...ft.exe

windows7-x64

1

Ζ�...ft.exe

windows10-2004-x64

1

Ζ�...ft.xls

windows7-x64

1

Ζ�...ft.xls

windows10-2004-x64

1

Ζ�...t.xlsm

windows7-x64

1

Ζ�...t.xlsm

windows10-2004-x64

1

Ζ�...�v.vbs

windows7-x64

3

Ζ�...�v.vbs

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3491106036840e2027542b1e882146316c6b2d4fc057d76fb8f26184bcca516

  • Size

    10.0MB

  • MD5

    1f54edf2654b3fec1ab779d4cbd190d3

  • SHA1

    8f1460610e729d3d4a44c8f1a100a3c136638ae1

  • SHA256

    d3491106036840e2027542b1e882146316c6b2d4fc057d76fb8f26184bcca516

  • SHA512

    74349b988deb262508cb466b777f9d16241b027ff294d7cd2812f6e189ab11e02adc776c9c7913d89c13530b287f11f867dc6d02f5de6593baae622ae994f431

  • SSDEEP

    196608:7a1YNFybTwWmwos+K8ZUxP03w5y9pPv0+W+FYbbvNB0xj9TdKJ+EV:7aCNwmLBcP0mGPv0F+FYvr6j9TdKkEV

Score
8/10
macromacro_on_action

Malware Config

Signatures

  • Office macro that triggers on suspicious action 3 IoCs

    Office document macro which triggers in special circumstances - often malicious.

    macromacro_on_action
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • d3491106036840e2027542b1e882146316c6b2d4fc057d76fb8f26184bcca516
    .zip
  • ΖVtgXPW[[̃ZbgAbv/dataset/item.msi
    .msi
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/parts/html-parts/jquery.js
    .js
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/parts/html-parts/js.js
    .js
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/parts/html-parts/kinmu_shift.gif
    .gif
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/parts/html-parts/shift_image_thumb2.jpg
    .jpg
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/parts/html-parts/style.css
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/parts/VK쐬.csv
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/shift_auto.exe
    .exe windows:4 windows x86 arch:x86

    6b64348875109bdd256552e42be15f4e


    Headers

    Imports

    Sections

  • ΖVtgXPW[[̃ZbgAbv/dataset/item/Vtg\쐬/Go_Shift.exe
    .exe windows:4 windows x86 arch:x86

    6696b365ad00b1b82429e03243d952a7


    Headers

    Imports

    Sections

  • ΖVtgXPW[[̃ZbgAbv/dataset/item/Vtg\쐬/shift.xls
    .xls windows office2003
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/Vtg\쐬/shift.xlsm
    .xlsm office2007
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/Vtg\쐬/ev[g.csv
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/Vtg\쐬/Wv.mdb
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬1 ߋf[^t/Go_Shift.exe
    .exe windows:4 windows x86 arch:x86

    6696b365ad00b1b82429e03243d952a7


    Headers

    Imports

    Sections

  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬1 ߋf[^t/shift.xls
    .xls windows office2003
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬1 ߋf[^t/shift.xlsm
    .xlsm office2007
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬1 ߋf[^t/쐬_Œx_ߋf[^t.csv
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬1 ߋf[^t/Wv.mdb
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/Go_Shift.exe
    .exe windows:4 windows x86 arch:x86

    6696b365ad00b1b82429e03243d952a7


    Headers

    Imports

    Sections

  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/P03_L̃JX^}CY.csv
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/P04_TԋΖ.csv
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/P11_o[g֎~.csv
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/P12_o[gK{.csv
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/P21_Ζg֎~.csv
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/P22_ΖgK{.csv
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/P23_xݗ̋Ζ.csv
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/P31_lʕs‹Ζ.csv
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/P32_As‹Ζ.csv
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/shift.xls
    .xls windows office2003
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/shift.xlsm
    .xlsm office2007
  • ΖVtgXPW[[̃ZbgAbv/dataset/item/쐬2/Wv.mdb
  • ΖVtgXPW[[̃ZbgAbv/ZbgAbv.vbs
    .vbs
  • ΖVtgXPW[[̃ZbgAbv/ǂł.txt
  • ΖVtgXPW[[̃ZbgAbv/ύX.txt