Overview
overview
10Static
static
1AuthBroker.bat
windows7-x64
1AuthBroker.bat
windows10-2004-x64
1BthAvctpSvc.ps1
windows7-x64
1BthAvctpSvc.ps1
windows10-2004-x64
1CastingShellExt.vbs
windows7-x64
3CastingShellExt.vbs
windows10-2004-x64
7DAFWiProv.bat
windows7-x64
1DAFWiProv.bat
windows10-2004-x64
1DeviceCenter.ps1
windows7-x64
1DeviceCenter.ps1
windows10-2004-x64
10Tracking_Logic.vbs
windows7-x64
3Tracking_Logic.vbs
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
AuthBroker.bat
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
AuthBroker.bat
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
BthAvctpSvc.ps1
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
BthAvctpSvc.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
CastingShellExt.vbs
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
CastingShellExt.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
DAFWiProv.bat
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
DAFWiProv.bat
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
DeviceCenter.ps1
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
DeviceCenter.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
Tracking_Logic.vbs
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
Tracking_Logic.vbs
Resource
win10v2004-20231222-en
General
-
Target
09012024_0058_exZJuAvdcoLfGHq.zip
-
Size
79KB
-
MD5
b404481c3e7a5575a3dc554f1e6d305f
-
SHA1
602479a862a551c4410eeb3bb80799a1485eee48
-
SHA256
8fb85b7d9afd4f8928b0be1e594eef14bde14f3970e3f57da5a0c31425264d73
-
SHA512
2495193e7fe8676bc76767743a41326e0ee07daffed8cf917410fbd46e6a03d713db29848ab605f442c192cddea85b983207be2a1793d61ffea0e669ac4211e3
-
SSDEEP
1536:Mxlk7K4EckA6taGLsUpb4q1w9Cvztsw2g/UMtPBSOY1Et7ZoGydo+1GKK7hpU5:UeKfA6t2UtZ1w98sw2gcMVBToO9ydP4U
Malware Config
Signatures
Files
-
09012024_0058_exZJuAvdcoLfGHq.zip.zip
Password: infected
-
AuthBroker.bat.bat .vbs
-
BthAvctpSvc.ps1.ps1
-
CastingShellExt.vbs.vbs
-
DAFWiProv.bat.bat .vbs
-
DeviceCenter.ps1
-
Tracking_Logic.vbs.vbs