Overview
overview
10Static
static
3inv.iso
windows10-2004-x64
3out.iso
windows10-2004-x64
1Unpaid_order-.lnk
windows10-2004-x64
3also/by.gif
windows10-2004-x64
1also/get.txt
windows10-2004-x64
1also/like.dll
windows10-2004-x64
10also/on.gif
windows10-2004-x64
1also/there.gif
windows10-2004-x64
1also/what.gif
windows10-2004-x64
1also/worker.cmd
windows10-2004-x64
1also/worker.js
windows10-2004-x64
1General
- Target inv.iso
- Size 526KB
- Sample240205-na8dzagdbq
- SHA256 71b5dc8fec75d1efb17f4738129efd2b47fef5c3442d3993239c0ac8c29d533c
- MD5 b0ea13990301f024fb3fbf1ca8bbaf4d
- SHA1 a3a81e04e129c1de8cef7dc883916a1f5021658b
- SHA512 86a03a0a0bc9c1f5f3e19763f0a136d7c92e12507f06c7e5909e759389fb9d5625569514a466d73f9e3e65ebb187f83811e589224bc4b0c720b1cdeca05cede5
- SSDEEP 6144:/S5kfebzXgBXKlDcWHamQlDFlDvUmVlDTBQdBbqPBzKbCOd2slDHOshCTlcZn1Pu:/S5kdzBQ8ogPxiBqL0hOTPxSQKHEqiZ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
inv.iso
Resource
win10v2004-20231215-en
Behavioral task
behavioral2
Sample
out.iso
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
Unpaid_order-.lnk
Resource
win10v2004-20231215-en
Behavioral task
behavioral4
Sample
also/by.gif
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
also/get.txt
Resource
win10v2004-20231215-en
Behavioral task
behavioral6
Sample
also/like.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
also/on.gif
Resource
win10v2004-20231215-en
Behavioral task
behavioral8
Sample
also/there.gif
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
also/what.gif
Resource
win10v2004-20231222-en
Behavioral task
behavioral10
Sample
also/worker.cmd
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
also/worker.js
Resource
win10v2004-20231215-en
Malware Config
Extracted
-
icedid
-
2745070743
-
cootembrast.com
Targets
-
- Target inv.iso
- Size 526KB
- SHA256 71b5dc8fec75d1efb17f4738129efd2b47fef5c3442d3993239c0ac8c29d533c
- MD5 b0ea13990301f024fb3fbf1ca8bbaf4d
- SHA1 a3a81e04e129c1de8cef7dc883916a1f5021658b
- SHA512 86a03a0a0bc9c1f5f3e19763f0a136d7c92e12507f06c7e5909e759389fb9d5625569514a466d73f9e3e65ebb187f83811e589224bc4b0c720b1cdeca05cede5
- SSDEEP 6144:/S5kfebzXgBXKlDcWHamQlDFlDvUmVlDTBQdBbqPBzKbCOd2slDHOshCTlcZn1Pu:/S5kdzBQ8ogPxiBqL0hOTPxSQKHEqiZ
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target out.iso
- Size 526KB
- SHA256 71b5dc8fec75d1efb17f4738129efd2b47fef5c3442d3993239c0ac8c29d533c
- MD5 b0ea13990301f024fb3fbf1ca8bbaf4d
- SHA1 a3a81e04e129c1de8cef7dc883916a1f5021658b
- SHA512 86a03a0a0bc9c1f5f3e19763f0a136d7c92e12507f06c7e5909e759389fb9d5625569514a466d73f9e3e65ebb187f83811e589224bc4b0c720b1cdeca05cede5
- SSDEEP 6144:/S5kfebzXgBXKlDcWHamQlDFlDvUmVlDTBQdBbqPBzKbCOd2slDHOshCTlcZn1Pu:/S5kdzBQ8ogPxiBqL0hOTPxSQKHEqiZ
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Unpaid_order-.lnk
- Size 1KB
- SHA256 d9a8ff6e4302ed79d0e6c9bafb7e4adf7ff9b30ae6fedbffadb5061f6642658d
- MD5 fa364a1cf654186f48204e6bdf456b63
- SHA1 b50d418398b1b5fbb248bcd063fbad18174f8f7a
- SHA512 c03bd180d034f8ccfb41114298f8b565781cdb4d009710fa60da04e5ef0bd6142998938503dc72afb7c6f87aa0809cac477c74d5d6b76e43dd9782923b2abf3b
- MD5 SHA1 SHA512
Score3/10 -
- Target also/by.gif
- Size 36KB
- SHA256 9cff2120eaada1e3f78dedc8441dd521374bde472df998ed533793d6b9f45cf7
- MD5 08832f70f70051af1e333f55a5831177
- SHA1 f92d02387b8ea01ee8774b7478a9d2edf2241d30
- SHA512 fc54b981f385fa42fabcb5df5646eda33e3d453713fe01efc16d7d11aae3f2067f207f0434d52993b59c8c7156dec595ea19b0611784b3f8018283da793d1b9b
- SSDEEP 768:RzipGJ3GzIq30tin+SNo5svSzqjWAC4Wu0/brIT:0QUtEtin+SNMJuTWt/gT
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target also/get.txt
- Size 242KB
- SHA256 b8aaf33cb48aa39a41700384f9dee291ceadfed830bed67dca7488f558a23957
- MD5 8de30ee3be338f27921eb8cfa5b95571
- SHA1 d1b58eb5aab93a49c0ced3701e2b1bbc540e63d1
- SHA512 a87177315c68a1b0947f3aa1db422fac6ed399838d7b5b91997bf6c8ae435fcf43500ac39642fa3da36a718891b4fc0a722e081b2c6d606d6fe20dacb1207e93
- SSDEEP 6144:3ebzXgBXKlDcWHamQlDFlDvUmVlDTBQdBbqPBzKbCOd2slDHOshCTlcZns:FzBQ8ogPxis
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target also/like.dat
- Size 102KB
- SHA256 1c66b9a445e00b352652452d5a328a9290f295f59d5047c31d9e79afbc73a340
- MD5 70ca4fdb88ee6c19ca5c2fd9ad190991
- SHA1 b25460176e51cbac31c3265aa812cd74c33af9f6
- SHA512 f89d507a417be50d9251df99e766b28036fa00f7671772645e9cd07455ed1a450a7fd6692a6d18e0cfa8bacb08c1ccc305ee60c7c97eb8a543fe4923a6535ae0
- SSDEEP 1536:ZpYpbLoPFd6rqUU6f5fKiPojZvHLvDIOwZs2uJsR8LbvvtdHD+K9qI2qfiY:ZQo+pKiPqLDIhv2L+Izfr
- MD5 SHA1 SHA512 SSDEEP
Score10/10 -
- Target also/on.gif
- Size 30KB
- SHA256 4fb89bdfe31b76ef1862a4a75b62227f7a25b505610b6455f56425b1ddf6d5b7
- MD5 6e7488150b4f46f9544604cb0a2d075b
- SHA1 7f0e90950211125a40f18ef87f9c708161bf382d
- SHA512 f7a1fb2c1082ce154dd9828e9732574114c2bfe833da9c81bcc603977d11c2a996c9f85400a58dab3706a82ca5fc06d74ad5008cf41f77420da9eb51d7baf07e
- SSDEEP 768:xZVLAgjXFlEndSJ4Oa72reCzkLSLUa8xQyFnnWe:xvfDFMdSJpaireCzkLSYNxQy57
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target also/there.gif
- Size 19KB
- SHA256 9b10ddd47a7b1d4bfe0c59cd040b4cec491f54dc4803ed8a5ae1a1fb6fc84d69
- MD5 55d8018603e642fb5082e472d8860fef
- SHA1 d45d8626dbda480efd3329c1755519ecb983ccf1
- SHA512 92d08800a6cd42546c18b09e52e4c00c327209a7130e717e5ea5f0fe268abe92b709b3d9293fd8f7cee649dc05c4013f091ecb04a0a6bd9186856e0fc682f261
- SSDEEP 384:4KGWO0wA1447cxSJm6MqEAhGTZJB7VMX9Dn6UnnKuNfmjG:M0w0Z4SoDTZVOLnnrEjG
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target also/what.gif
- Size 28KB
- SHA256 e66882ebcfd63a958d1c1d09eae886b7985a0161acea748e7336822eebc2d7d6
- MD5 2fba2991550314b7e0f0444857ceafce
- SHA1 3bd82e03b9188f4739fe9e9274e10c8a7a9a9351
- SHA512 ffaacde655bb5aec56bc79848d365e3e760f03325304fe2cbefd6e9b9008b963e07ad88c94b9be03d457053275dcaeaa2163e521ff12f69c4e3cee6efa8ebe6c
- SSDEEP 768:S/4MmAmbY+9pGCI/l24zvbtCDSAv6pPwO+fZgM1yMNqLemXr:S/MnWCI/l24zztCDSAv6pPsf0demXr
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target also/worker.cmd
- Size 37B
- SHA256 7807d8a39d8eff1f69a77220ac2105a5149c19fb5d0a8673f3cf1e127b7b43ee
- MD5 ca31d778ae1348c5303a41eb7aff7db2
- SHA1 42b5026ebf8f06b7feb7afc25e3d2a3feb9786b7
- SHA512 cc7b3498d6e442cf18ac52a27c11d868f11e4bc90b2b8243c2feeee8f9e135c9f5c6a1de746a96dc470ed8bde21afe51bd712a96ee34cf0e7da891a2057c4581
- MD5 SHA1 SHA512
Score1/10 -
- Target also/worker.js
- Size 596B
- SHA256 f86e32aa7f4792678a29f9cebee103afc9461991a6e49580263c7620295b1928
- MD5 b831d812278417ea694d047196ebd48f
- SHA1 19a115e555e0377f408b53a3fefe473110ad784b
- SHA512 082c4b6e0b0b462571daedc10e4404f96acc0eca2cf623f2741f591819fabd652955e2a45bbf007c71d666eec09c2c5080073dfb05b3a5accdc5cc4892aa23ec
- MD5 SHA1 SHA512
Score1/10