Behavioral task
behavioral1
Sample
Windows.7.Loader.v1.7.7[www.somniu.net]/Windows 7 Loader [www.somniu.net].exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Windows.7.Loader.v1.7.7[www.somniu.net]/Windows 7 Loader [www.somniu.net].exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Windows.7.Loader.v1.7.7[www.somniu.net]/www.somniu.net.url
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Windows.7.Loader.v1.7.7[www.somniu.net]/www.somniu.net.url
Resource
win10v2004-20231215-en
General
-
Target
3d5b024b75482edfc315aabce72de6f9
-
Size
1.1MB
-
MD5
3d5b024b75482edfc315aabce72de6f9
-
SHA1
3a8b42c1344853e84ca0b1bffdcd10fecc130940
-
SHA256
e948d10b7aa8c014b08516567d706b0bc13229e7b36dac032c48d02c65f63762
-
SHA512
74f31efd8a893485dbdd8aadeb2aba61a0f2d94f85d8fcec47f1c63c33e35d1287f92f8bd653548ee58443a31e226b672f0be76d3d1d6fa3f7b1e4fec51093ea
-
SSDEEP
24576:c4T7MoTy764NTQX1JpqnDK/ywOU6CeuxyNQWv1aYTN+te5KbSvZlq4:ncQyeMTQX1nqDK//OtC3fWtrBCjmvZ7
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Windows.7.Loader.v1.7.7[www.somniu.net]/Windows 7 Loader [www.somniu.net].exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Windows.7.Loader.v1.7.7[www.somniu.net]/Windows 7 Loader [www.somniu.net].exe
Files
-
3d5b024b75482edfc315aabce72de6f9.rar
-
Windows.7.Loader.v1.7.7[www.somniu.net]/Leia.txt
-
Windows.7.Loader.v1.7.7[www.somniu.net]/Notes/Arguments.txt
-
Windows.7.Loader.v1.7.7[www.somniu.net]/Notes/Checksums.txt
-
Windows.7.Loader.v1.7.7[www.somniu.net]/Notes/How to add support.txt
-
Windows.7.Loader.v1.7.7[www.somniu.net]/Notes/How to recover Windows.txt
-
Windows.7.Loader.v1.7.7[www.somniu.net]/Notes/How to restore tokens.txt
-
Windows.7.Loader.v1.7.7[www.somniu.net]/Notes/Keys.ini
-
Windows.7.Loader.v1.7.7[www.somniu.net]/Notes/Loader changelog.txt
-
Windows.7.Loader.v1.7.7[www.somniu.net]/Notes/Version history.txt
-
Windows.7.Loader.v1.7.7[www.somniu.net]/Somniu-[Leia].jpg.jpg
-
Windows.7.Loader.v1.7.7[www.somniu.net]/Windows 7 Loader [www.somniu.net].exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 577KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Windows.7.Loader.v1.7.7[www.somniu.net]/www.somniu.net.URL