Static task
static1
Behavioral task
behavioral1
Sample
7fbdebf9b6aea67854a26edd6a69e8c8.rar
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7fbdebf9b6aea67854a26edd6a69e8c8.rar
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
1084/BD_PLUS_7_TRN-dEViATED.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
1084/BD_PLUS_7_TRN-dEViATED.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
1084/Club-3t.ru клуб единомышленников.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
1084/Club-3t.ru клуб единомышленников.url
Resource
win10v2004-20231215-en
General
-
Target
7fbdebf9b6aea67854a26edd6a69e8c8
-
Size
3.0MB
-
MD5
7fbdebf9b6aea67854a26edd6a69e8c8
-
SHA1
e4667f313fc41cec2f39ab0b177c833fb26aa1ee
-
SHA256
bec1d7451238d1ed32d39da79c3c74e21d3f6690538b48a6481234c3f4c2b24f
-
SHA512
907eabde49077e0aa7e49b2bd3fecb4b84f3627d318a4520d25b25aad985239d6119809e6c029b43ac77eaac21bd34243ce0d471d44d1aa08d336098bb960435
-
SSDEEP
49152:7iy2Fwh+SAg89cmrjhQt8UghYm+gCHiWmMiQ2zfY0uSG6aYBLqLelPYzeLOc3TrE:Rucm528Ugnsi3S2zg0i0dPYSLOc3FEbd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1084/BD_PLUS_7_TRN-dEViATED.exe
Files
-
7fbdebf9b6aea67854a26edd6a69e8c8.rar .ps1 polyglot
-
1084/BD_PLUS_7_TRN-dEViATED.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 7.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
1084/Club-3t.ru клуб единомышленников.url
-
1084/deviated.nfo