Overview
overview
8Static
static
3MPS-15-Fin...al.exe
windows7-x64
1MPS-15-Fin...al.exe
windows10-2004-x64
1MPS-15-Fin...er.exe
windows7-x64
8MPS-15-Fin...er.exe
windows10-2004-x64
8MPS-15-Fin...ps.url
windows7-x64
1MPS-15-Fin...ps.url
windows10-2004-x64
1mannuforal...ps.url
windows7-x64
1mannuforal...ps.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
MPS-15-Final/MPS-15-Final.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
MPS-15-Final/MPS-15-Final.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
MPS-15-Final/Yahoo_Cracker.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
MPS-15-Final/Yahoo_Cracker.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
MPS-15-Final/mannuforall- Latest Mobile & PC Apps.url
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
MPS-15-Final/mannuforall- Latest Mobile & PC Apps.url
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
mannuforall- Latest Mobile & PC Apps.url
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
mannuforall- Latest Mobile & PC Apps.url
Resource
win10v2004-20231222-en
General
-
Target
15038af6514676d1249093baf499f75d
-
Size
229KB
-
MD5
15038af6514676d1249093baf499f75d
-
SHA1
7d7e239a7512163f18adeea53b8c807409b5c8f8
-
SHA256
6191e327bc5f7a34d9e666357743a270b3a120e775a0f92739c7b31b05ecf568
-
SHA512
9875d8d7441a92d009be7983cbfc6fb67356ee7912d70bf4e4776a8ffea4c56ae1bf08ff87eeb70f08d28c0aa1a3be418f47ea620f85fe39e6dc2f219e9f80dc
-
SSDEEP
6144:hwylV0FtOow6Sqq/9mGKuHn6Z/wWPz3sZf48H:W8Kbuwq/QlQywWPTcf4Q
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/MPS-15-Final/MPS-15-Final.exe unpack001/MPS-15-Final/Yahoo_Cracker.exe
Files
-
15038af6514676d1249093baf499f75d.rar
-
MPS-15-Final/MPS-15-Final.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 198KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
MPS-15-Final/Yahoo_Cracker.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 18KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
MPS-15-Final/mannuforall- Latest Mobile & PC Apps.url
-
mannuforall- Latest Mobile & PC Apps.url