Overview
overview
7Static
static
7Новая...ME.exe
windows7-x64
7Новая...ME.exe
windows10-2004-x64
1Новая...ew.exe
windows7-x64
1Новая...ew.exe
windows10-2004-x64
1Новая...я.doc
windows7-x64
4Новая...я.doc
windows10-2004-x64
1Новая...я.doc
windows7-x64
4Новая...я.doc
windows10-2004-x64
1Новая...я.doc
windows7-x64
1Новая...я.doc
windows10-2004-x64
1Новая...я.doc
windows7-x64
1Новая...я.doc
windows10-2004-x64
1Новая...�.html
windows7-x64
1Новая...�.html
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Новая папка/README.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Новая папка/README.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
Новая папка/View.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Новая папка/View.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
Новая папка/Біохімія.doc
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Новая папка/Біохімія.doc
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
Новая папка/Гістологія.doc
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
Новая папка/Гістологія.doc
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
Новая папка/Мікробіологія.doc
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
Новая папка/Мікробіологія.doc
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
Новая папка/Патфізіологія.doc
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
Новая папка/Патфізіологія.doc
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
Новая папка/Прочти.html
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
Новая папка/Прочти.html
Resource
win10v2004-20231222-en
General
-
Target
4c37669d1b90c483c9cb7957cf5c5fe5
-
Size
4.1MB
-
MD5
4c37669d1b90c483c9cb7957cf5c5fe5
-
SHA1
088456c689ba81e618f8d26ea4f2e5720766d13d
-
SHA256
9edbf92a209c209b90d73bd1887ee3c4cbad688f44b49f38f198af89b0ddf547
-
SHA512
6309665b70f23fb14a3cd0076a50b1e4911317f566af6bf8b49832dd8f17ed534752275f1101caa89e5b9b97a8c58a20fba22d37c49bea915768416fecbdd5c9
-
SSDEEP
49152:TTltcTINbN3D/AeD0pjGJ2yH+XUUzk4jHSlJkJQvgThJvGlLI4cbT9m:TxWkMDE2yirPjyluJfz+lJcng
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Новая папка/README.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Новая папка/README.exe unpack001/Новая папка/View.exe
Files
-
4c37669d1b90c483c9cb7957cf5c5fe5.rar
-
Новая папка/AnatomyZLP.zdt
-
Новая папка/BiochemZLP.zdt
-
Новая папка/BiologyZLP.zdt
-
Новая папка/HystologyZLP.zdt
-
Новая папка/Krok1ZLP.zdt
-
Новая папка/MicroBiologyZLP.zdt
-
Новая папка/PatAnatomyZLP.zdt
-
Новая папка/PatPhysiologyZLP.zdt
-
Новая папка/PharmakologyZLP.zdt
-
Новая папка/PhysiologyZLP.zdt
-
Новая папка/README.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Новая папка/View.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 198KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reso Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Новая папка/Біохімія.doc.doc windows office2003
-
Новая папка/Гістологія.doc.doc windows office2003
-
Новая папка/Мікробіологія.doc.doc windows office2003
-
Новая папка/Патфізіологія.doc.doc windows office2003
-
Новая папка/Прочти.html.html