Overview
overview
3Static
static
3ָ�...��.htm
windows7-x64
1ָ�...��.htm
windows10-2004-x64
1ָ�...��.exe
windows7-x64
1ָ�...��.exe
windows10-2004-x64
1ָ�...��.url
windows7-x64
1ָ�...��.url
windows10-2004-x64
1ָ�...��.url
windows7-x64
1ָ�...��.url
windows10-2004-x64
1ָ�...��.url
windows7-x64
1ָ�...��.url
windows10-2004-x64
1ָ�...��.url
windows7-x64
1ָ�...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ָ v1.0/77169.org˵.htm
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ָ v1.0/77169.org˵.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
ָ v1.0/ָ.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
ָ v1.0/ָ.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
ָ v1.0/ĺڿͬ˽ѧѵ.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
ָ v1.0/ĺڿͬ˽ѧѵ.url
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
ָ v1.0/ĺڿͬ.url
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
ָ v1.0/ĺڿͬ.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
ָ v1.0/¿ƼIDC˾.url
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
ָ v1.0/¿ƼIDC˾.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
ָ v1.0/¿Ƽȫά.url
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
ָ v1.0/¿Ƽȫά.url
Resource
win10v2004-20231215-en
General
-
Target
059fe7645ddd1a3382dd142982c948de
-
Size
1.6MB
-
MD5
059fe7645ddd1a3382dd142982c948de
-
SHA1
aa26365b7a106844c57e4d8593d674be1049d721
-
SHA256
14c4900beb1697bd14c26e9423fa8e1e495a6f77549cf9f4cd265d281b6d650c
-
SHA512
2be091a14924b9faee34f2987e0e613b75388b45d496356a576cb0e7c821a9f8599ae18cc02ea6e14ed07d1eee18b136d69cca645e8ec343c70f041a346a952c
-
SSDEEP
24576:M+F+WU2tRqd3VT7vcmd5NA/Th0xh3IJJzI9Xg/XZ49YCytpewdfX3L5u48SPbob0:Mm1Hs3WSi/di3gzI9Xg/+yzRFx8Ao7s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ָ v1.0/ָ.exe
Files
-
059fe7645ddd1a3382dd142982c948de.zip
-
ָ v1.0/##ע##.txt
-
ָ v1.0/77169.orgʹð˵.txt
-
ָ v1.0/77169.org˵.htm.html
-
ָ v1.0/Thumbs.db
-
ָ v1.0/˵.txt
-
ָ v1.0/ ##ע##.txt
-
ָ v1.0/ָ.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 82KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 359KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
ָ v1.0/ĺڿͬ˽ѧѵ.url
-
ָ v1.0/ĺڿͬ.url
-
ָ v1.0/¿ƼIDC˾.url
-
ָ v1.0/¿Ƽȫά.url