Overview

overview

10

Static

static

3

EXCEPT~1.js

windows7-x64

10

EXCEPT~1.js

windows10-2004-x64

10

ETricks.exe

windows7-x64

1

ETricks.exe

windows10-2004-x64

1

SEHxmpl.exe

windows7-x64

1

SEHxmpl.exe

windows10-2004-x64

1

ring032/make2.bat

windows7-x64

1

ring032/make2.bat

windows10-2004-x64

1

ring032/ring032.exe

windows7-x64

1

ring032/ring032.exe

windows10-2004-x64

1

rline32/make2.bat

windows7-x64

1

rline32/make2.bat

windows10-2004-x64

1

rline32/rline32.exe

windows7-x64

1

rline32/rline32.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    46fa7795f8434ea22ff2d18f9a4ded29

  • Size

    22KB

  • MD5

    46fa7795f8434ea22ff2d18f9a4ded29

  • SHA1

    b227e754799f3a7cf26f24dc9d2bf5117fd7aaf0

  • SHA256

    52d95f79b909e1773f08a0b4c2fc3f39211683b3b9d9cb9bb897dee245ad3db5

  • SHA512

    a6bb4e5bd27197d75f3d062dd09204b47c9af89d0cfb845e2827e3f2651a0131c45ffc8e33110a5d55e7cf4fcfc98a95e3a6c1a5772b1c7768eeece1ea9d768e

  • SSDEEP

    384:nUYPI3wZKX+StsYyAMcNTCd+JzSGlTIbY3fzU1RTIO2dG:UYPIAHSt3yAMcgYpcYPI1j2dG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 46fa7795f8434ea22ff2d18f9a4ded29
    .zip
  • DESCRIPT.ION
  • EXCEPT~1.HTM
    .js
  • SEHINASM.ZIP
    .zip
  • ETricks.zip
    .zip
  • ETricks.asm
  • ETricks.def
  • ETricks.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ETricks.inc
  • KnlxHndl.asm
  • SEH.inc
  • SEHinASM.txt
  • SEHxmpl.asm
  • SEHxmpl.def
  • SEHxmpl.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • owl-seh.zip
    .zip
  • ring032/make2.bat
  • ring032/ring032.asm
  • ring032/ring032.exe
    .exe windows:4 windows x86 arch:x86

    4040d31bab71c6d32a67892cd57b1ef7


    Headers

    Imports

    Sections

  • rline32/make2.bat
  • rline32/rline32.asm
  • rline32/rline32.exe
    .exe windows:4 windows x86 arch:x86

    4040d31bab71c6d32a67892cd57b1ef7


    Headers

    Imports

    Sections

  • rline32/rline32.txt