Static task
static1
Behavioral task
behavioral1
Sample
ACreedOrigins+20Tr_LNG/ACreedOrigins+20Tr_LNG.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ACreedOrigins+20Tr_LNG/ACreedOrigins+20Tr_LNG.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
ACreedOrigins+20Tr_LNG/Всё для S.T.A.L.K.E.R., моды Stalker, файлы Сталкер - Stalker news.url
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
ACreedOrigins+20Tr_LNG/Всё для S.T.A.L.K.E.R., моды Stalker, файлы Сталкер - Stalker news.url
Resource
win10v2004-20231215-en
General
-
Target
114ecf40db4f88d05fab3aff5b76076f
-
Size
2.3MB
-
MD5
114ecf40db4f88d05fab3aff5b76076f
-
SHA1
52842b287976378047b25d607fb73b65bdbe0917
-
SHA256
88cb93b24b1e76d94edc7936c246165de1e74d3036a27c2e6419ca4ca532ae99
-
SHA512
d6716ea69ac7c416d9466f4f2f5b1625ff6c6564539494ffeb606217f711334f45c30ef62b1b03bf7f7bc75571acde865c93393a5ef9d19c7ca26ea8a144f0a6
-
SSDEEP
49152:o3tJcLRdGcn725ob6lxZvL14QgO//hpHq9nhEtNbHjC6J:cLcL/Gcn725oexBL9gO//zK9nR6J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ACreedOrigins+20Tr_LNG/ACreedOrigins+20Tr_LNG.exe
Files
-
114ecf40db4f88d05fab3aff5b76076f.7z
-
ACreedOrigins+20Tr_LNG/ACreedOrigins+20Tr_LNG - INFO.txt
-
ACreedOrigins+20Tr_LNG/ACreedOrigins+20Tr_LNG.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ACreedOrigins+20Tr_LNG/VERY IMPORTANT!.txt
-
ACreedOrigins+20Tr_LNG/Всё для S.T.A.L.K.E.R., моды Stalker, файлы Сталкер - Stalker news.url.url .js polyglot