Static task
static1
Behavioral task
behavioral1
Sample
hdrcktbq/˶രͬV4.9/˶രͬ4.9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
hdrcktbq/˶രͬV4.9/˶രͬ4.9.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
hdrcktbq/˶രͬV4.9/ض.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
hdrcktbq/˶രͬV4.9/ض.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
hdrcktbq/˶രͬ_V4.9 ɫ_9.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
hdrcktbq/˶രͬ_V4.9 ɫ_9.url
Resource
win10v2004-20231215-en
General
-
Target
187743b122b22403c24db30e35cf3dbc
-
Size
4.1MB
-
MD5
187743b122b22403c24db30e35cf3dbc
-
SHA1
be71f22801d20982a476387e785548b646ac428c
-
SHA256
4b296afd3ab6d31313a67d45d641a06f58d3165376baedc51e9d030970e64741
-
SHA512
432b093f8013e5417fbda7b558ed4c0878a1a969a9357d648153890c6419f40523a7ed43a2d8ef447f248dbf53333315041054d715f14a1e80e23205b57ef59e
-
SSDEEP
98304:I/GiFDmXpUu/gLkP28uxEWsJc8ejZn/IGwU/nrArjQr06:0TmXz/gL03WC9eln/IGXnkwl
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/hdrcktbq/˶രͬV4.9/˶രͬ4.9.exe unpack001/hdrcktbq/˶രͬV4.9/ض.exe
Files
-
187743b122b22403c24db30e35cf3dbc.zip
-
hdrcktbq/˶രͬV4.9/ʹ˵.jpg.jpg
-
hdrcktbq/˶രͬV4.9/.txt
-
hdrcktbq/˶രͬV4.9/˶രͬ4.9.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.2MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jtlsoqad Size: 940KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qpywrvxb Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
hdrcktbq/˶രͬV4.9/ض.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.1MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rkdkrond Size: 912KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kqgbdyah Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
hdrcktbq/˶രͬ_V4.9 ɫ_9.url.url
-
hdrcktbq/ź˵.txt