mshtml.zip
- SHA256 31475717735f9aee20def2a4044b42a52cb92e8cf885b92a042099a273688135
Password
infected
Overview
overview
10Static
static
10Challenge_...m.docx
windows7-x64
4Challenge_...m.docx
windows10-2004-x64
1Challenge_...1.docx
windows7-x64
4Challenge_...1.docx
windows10-2004-x64
1Challenge_...y.docx
windows7-x64
4Challenge_...y.docx
windows10-2004-x64
1Challenge_...1.docx
windows7-x64
4Challenge_...1.docx
windows10-2004-x64
1tools/numb...ing.py
ubuntu-18.04-amd64
1tools/numb...ing.py
debian-9-armhf
1tools/numb...ing.py
debian-9-mips
1tools/numb...ing.py
debian-9-mipsel
1oledump.py
ubuntu-18.04-amd64
1oledump.py
debian-9-armhf
1oledump.py
debian-9-mips
1oledump.py
debian-9-mipsel
1plugin_biff.py
ubuntu-18.04-amd64
1plugin_biff.py
debian-9-armhf
1plugin_biff.py
debian-9-mips
1plugin_biff.py
debian-9-mipsel
1plugin_clsid.py
ubuntu-18.04-amd64
1plugin_clsid.py
debian-9-armhf
1plugin_clsid.py
debian-9-mips
1plugin_clsid.py
debian-9-mipsel
1plugin_dridex.py
ubuntu-18.04-amd64
1plugin_dridex.py
debian-9-armhf
1plugin_dridex.py
debian-9-mips
1plugin_dridex.py
debian-9-mipsel
1plugin_hifo.py
ubuntu-18.04-amd64
1plugin_hifo.py
debian-9-armhf
1plugin_hifo.py
debian-9-mips
1plugin_hifo.py
debian-9-mipsel
1Static task
static1
Behavioral task
behavioral1
Sample
Challenge_FIles/Employee_W2_Form.docx
Resource
win7-20231215-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Challenge_FIles/Employee_W2_Form.docx
Resource
win10v2004-20231222-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Challenge_FIles/Employees_Contact_Audit_Oct_2021.docx
Resource
win7-20231215-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
Challenge_FIles/Employees_Contact_Audit_Oct_2021.docx
Resource
win10v2004-20231215-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral5
Sample
Challenge_FIles/Work_From_Home_Survey.docx
Resource
win7-20231215-en
windows7-x64
9 signatures
150 seconds
Behavioral task
behavioral6
Sample
Challenge_FIles/Work_From_Home_Survey.docx
Resource
win10v2004-20231215-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral7
Sample
Challenge_FIles/income_tax_and_benefit_return_2021.docx
Resource
win7-20231215-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral8
Sample
Challenge_FIles/income_tax_and_benefit_return_2021.docx
Resource
win10v2004-20231215-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral9
Sample
tools/numbers-to-string.py
Resource
ubuntu1804-amd64-20231221-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
tools/numbers-to-string.py
Resource
debian9-armhf-20231222-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
tools/numbers-to-string.py
Resource
debian9-mipsbe-20231215-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
tools/numbers-to-string.py
Resource
debian9-mipsel-20231215-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
oledump.py
Resource
ubuntu1804-amd64-20231215-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
oledump.py
Resource
debian9-armhf-20231221-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
oledump.py
Resource
debian9-mipsbe-20231222-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
oledump.py
Resource
debian9-mipsel-20231215-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
plugin_biff.py
Resource
ubuntu1804-amd64-20231215-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
plugin_biff.py
Resource
debian9-armhf-20231215-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
plugin_biff.py
Resource
debian9-mipsbe-20231222-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
plugin_biff.py
Resource
debian9-mipsel-20231221-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
plugin_clsid.py
Resource
ubuntu1804-amd64-20231215-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
plugin_clsid.py
Resource
debian9-armhf-20231215-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
plugin_clsid.py
Resource
debian9-mipsbe-20231215-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
plugin_clsid.py
Resource
debian9-mipsel-20231221-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
plugin_dridex.py
Resource
ubuntu1804-amd64-20231222-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
plugin_dridex.py
Resource
debian9-armhf-20231215-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
plugin_dridex.py
Resource
debian9-mipsbe-20231222-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
plugin_dridex.py
Resource
debian9-mipsel-20231221-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
plugin_hifo.py
Resource
ubuntu1804-amd64-20231215-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
plugin_hifo.py
Resource
debian9-armhf-20231215-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
plugin_hifo.py
Resource
debian9-mipsbe-20231221-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
plugin_hifo.py
Resource
debian9-mipsel-20231215-en
debian-9-mipsel
0 signatures
150 seconds
General
- Target mshtml.zip
- Size 262KB
- Sample240217-3almjacb64
- SHA256 31475717735f9aee20def2a4044b42a52cb92e8cf885b92a042099a273688135
- MD5 75a28db68a020da28cf223010f7c9f9c
- SHA1 361aa10961eed91b277ffea70641ed6435550d7d
- SHA512 6fbe84b932773d0e0f7b12ddcbb4d2b6f802036f71f42f95b65bed7d3a262db3609bbbc4ee8c54a5ee86c5e952da059bba1fd99ac532c07401a3bf98068f3964
- SSDEEP 6144:dem485iuNrJhuJGd0AkfX+Yk3xonVBio57pMN+UM8iNuiYwLGZTqUdJP+TDu:dempTJAQd0AmOX3mVBp1MN5Ri/YeGZTl
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Rule
Microsoft Office MHTML OLEObject
C2
-
arsenal.30cm.tw:1212/word.html
-
http://175.24.190.249/note.html
-
http://trendparlye.com/wiki0509.html
-
http://hidusi.com/e8c76295a5f9acb7/side.html
Signatures
File Explorer
-
mshtml.zip.zip 262KB
-
Challenge_FIles/Employee_W2_Form.docx.docx 12KB
-
Challenge_FIles/Employees_Contact_Audit_Oct_2021.docx.docx 12KB
-
Challenge_FIles/Work_From_Home_Survey.doc.docx .doc 26KB
-
Challenge_FIles/income_tax_and_benefit_return_2021.docx.docx 23KB
-
tools/numbers-to-string.py.py .sh 17KB
-
tools/oledump_V0_0_60.zip.zip 106KB
-
contains_pe_file.yara666B
-
decoder_add1.py.py .sh 1KB
-
decoder_ah.py.py .sh 1KB
-
decoder_chr.py.py .sh 1KB
-
decoder_rol1.py.py .sh 1KB
-
decoder_xor1.py.py .sh 1KB
-
maldoc.yara7KB
-
oledump.py.py .sh 100KB
-
plugin_biff.py.py .sh 139KB
-
plugin_clsid.py.py .sh 1KB
-
plugin_dridex.py.py .sh 8KB
-
plugin_hifo.py.py .sh 864B
-
plugin_http_heuristics.py.py .sh 6KB
-
plugin_jumplist.py.py .sh 4KB
-
plugin_linear.py.py .sh 1KB
-
plugin_msg.py.py .sh 5KB
-
plugin_msg_summary.py.py .sh 4KB
-
plugin_msi.py.py .sh 1KB
-
plugin_office_crypto.py.py .sh 1KB
-
plugin_ppt.py.py .sh 14KB
-
plugin_str_sub.py.py .sh 1KB
-
plugin_stream_o.py.py .sh 2KB
-
plugin_stream_sample.py.py .sh 2KB
-
plugin_vba.py.py .sh 5KB
-
plugin_vba_dco.py.py .sh 2KB
-
plugin_vba_routines.py.py .sh 973B
-
plugin_vba_summary.py.py .sh 1KB
-
plugin_vbaproject.py.py .sh 73KB
-
plugin_version_vba.py.py .sh 1KB
-
vba.yara1KB
-
tools/re-search.py.py .sh 29KB
-
tools/reextra.py.py .sh 48KB
-
tools/reextra.pyc51KB
-
tools/xmldump.py.py .sh 16KB
-
tools/zipdump.py.py .sh 148KB
Challenge_FIles/Employee_W2_Form.docx
- SHA256 679bbe0c50754853978a3a583505ebb99bce720cf26a6aaf8be06cd879701ff1
- MD5 45e7d6562bfddb816d45649dd667abde
- SHA1 00087e46ec0ef6225de59868fd016bd9dd77fa3c
- SHA512 0567873b42eece93787da4f4c3b72ecb0d952450d8eb59b354a5f91ed95395a2662171e05cdcf4a829fdbd0b5cbcca97701fef9b96b1ad0d8728922bbd0288fa
- SSDEEP 192:f6ijVmar18H111M05AgPekrFD2h0vsmyVk7PeOJ2wc3rMKkokceeQh:f6ijca6H111/eo1hvsHieIhoseQh
- MD5 SHA1 SHA512 SSDEEP
Challenge_FIles/Employees_Contact_Audit_Oct_2021.docx
- SHA256 ed2b9e22aef3e545814519151528b2d11a5e73d1b2119c067e672b653ab6855a
- MD5 d5742309ba8146be9eab4396fde77e4e
- SHA1 8aaa79ee4a81d02e1023a03aee62a47162a9ff04
- SHA512 37367ea06191c8a949f6c092bc4137736b344cc9892bf8a19e149557919d9276fb1301009a700cede0f2ca05d6827c827992817aee7b8968a5429e433fe0c8ba
- SSDEEP 192:60L6GkWglL+bzW6mlHRrZu87Fym3tZknRIhRHNwC3Eo+ETdlexwDvx/jVm9CoDFn:603kpLTZJHm+Eo+ETd4weCoDFLFd
- MD5 SHA1 SHA512 SSDEEP
Challenge_FIles/Work_From_Home_Survey.doc
- SHA256 84674acffba5101c8ac518019a9afe2a78a675ef3525a44dceddeed8a0092c69
- MD5 41dacae2a33ee717abcc8011b705f2cb
- SHA1 4b35d14a2eab2b3a7e0b40b71955cdd36e06b4b9
- SHA512 11f7177dc3c8a804ff6450477e15aadd20fddac98205008db25a4f6ef69a54b7cb7c9dd0d7bdf1b1d317f306482d86ad5ef150530194de7d8dbe344203962648
- SSDEEP 768:8HVoVneOa0HD/vb9EVoiJWq8UCei96T8vuX3m86RAFvg5e:8QVvbvb9wnIq8OitP88eY5e
- MD5 SHA1 SHA512 SSDEEP
Challenge_FIles/income_tax_and_benefit_return_2021.docx
- SHA256 d0e1f97dbe2d0af9342e64d460527b088d85f96d38b1d1d4aa610c0987dca745
- MD5 55998cb43459159a5ed4511f00ff3fc8
- SHA1 9bec2182cc5b41fe8783bb7ab6e577bac5c19f04
- SHA512 8f04951f9efb5acdad0a625d9f63154089d552fe4281ca53a759cc0a0468b8d9c76af863e34ed6e00802225a4408bcda1110a6efce30357e6173973ea5bf7838
- SSDEEP 384:Q6UDg00MWEg9fPCPyH111/elBqhveoNHfn5yAehqbhtgyhdCxi556BjsbIwRq:QcMWE04uebyvNv5yHcttg6dwc5YQb5w
- MD5 SHA1 SHA512 SSDEEP
tools/numbers-to-string.py
- SHA256 332822ca13b283da92f399ac407ab0a99ab18df32e5996cee9386be54ba8a225
- MD5 d139e5574623629a158c7cbd0c47b6a6
- SHA1 5f6a403b2c0341d917a8e9c9ab84dc76fc9199b2
- SHA512 1d4dfee764c3fc0b1d9041599654b6e6dc55df40ab96b0517654abc5bb74f6b707fac964946412ea03892a5d573e61435d958315528a7c0490adbf07ac78bf26
- SSDEEP 384:QFU0mcbIZyAFURaIZCYbthrkE8JrnutrZ9GjFa8B:yBmcbIZyAFerAE8tUEjFa8B
- MD5 SHA1 SHA512 SSDEEP
tools/oledump_V0_0_60.zip
- SHA256 d847e499cb84b034e08bcddc61addada39b90a5fa2e1aba0756a05039c0d8ba2
- MD5 bc7631059077294223bb225d16fb7186
- SHA1 cf52b55321104a7ecba5062ca0e0f949c259db83
- SHA512 86183140f38ed0188fdc1500bacc4a2a4793c4e7a57db51367eda18e8fd7e90decc25efc0299632233c73bce0c42c393e12df13f80f638db184ff13c846d8270
- SSDEEP 3072:Xq4MQ8acq2W+YoBTOnyqwl+uNaI0EEwLtmF:Xq4MQ/c3BOnXwwca5
- MD5 SHA1 SHA512 SSDEEP
Password
infected
contains_pe_file.yara
- SHA256 28a3a50f910050850bccf157098cdaaf7a17762dec9c9f097889073142187666
- MD5 28f640ec4221a9051016876ce28a9860
- SHA1 37a5851ebe09c2fb1a70d0f115c7fa4b81cca461
- SHA512 515320556234cd7cca88da1442f2fd2f65f78d8b9374e5b1173d4a5088fbdd514709e7566275a238ea304ea8657d65acc4dbce1cd64f19d63562ebb871b0cdcf
- MD5 SHA1 SHA512
decoder_add1.py
- SHA256 3ae45cdaf1550a9240d3c96e5c723729ba1aae2d84f0562ba0505662d8506edb
- MD5 16134bb702ffb7e747be59fb18875f21
- SHA1 c070016a18ee1775ade0abf3a599cdc05bf6f67b
- SHA512 d770e77a7f17b3e4f3f17302513b33333b920477034f4f43c81a9049347995b0ae1f2abf6295a3e94b738db56e5da14340f8223be79cbbb25372a20fc4bf72eb
- MD5 SHA1 SHA512
decoder_ah.py
- SHA256 8941b1e1baf50cf2064cc8387631887568075433fb6feb05f06b25fe433bab3e
- MD5 e99956971f7cfd746e8f04818b93db46
- SHA1 f457eab1ca20f71eb136db827a71e467d95c1664
- SHA512 20dd1c3adf7ed254101d14729a706e06df9189715b08bb1d1cf7688006072495db7f5c9e6e8c6620b4796ccdcf0ca5996f5ff4f9cc76f29e4cb2b92404678a9d
- MD5 SHA1 SHA512
decoder_chr.py
- SHA256 4c7885a4a36271b1822b852b85f519323b49b3d69d4c4921988de19dd07b4986
- MD5 7b00691dd2e22b681255da495c3599b6
- SHA1 c29c91b7bd585a3134bf41b3b544f8a67040ed2f
- SHA512 d70155c20e2402f46b08b262f180c5f77c64b893f93d5584d37f4ac3ead5222c41aaed74e6151ee41c932c9f9968de538ba2a0e6202c6b342bac5a46e72a7881
- MD5 SHA1 SHA512
decoder_rol1.py
- SHA256 72b3d0d684f32b85f9add43619cf354efe983e4724301c4d2cae014b9c033f2e
- MD5 dbc7c606edba8c865a29534a03cddada
- SHA1 ae27f0aef5cca833c9d8a5940ca3f22a5c8579bd
- SHA512 211b47516d3a3695e4dd302fd3663ca40db590fea1940195b89a5a2f93b6fb2df97a8fb97a36340e33360d60c3ec11e35be87812bc74d1c88c03fb50335bb2de
- MD5 SHA1 SHA512
decoder_xor1.py
- SHA256 1d2cd9dc1a82343f2373d5c6f30314d0749c6cc2c1fd8469008cc196242ae386
- MD5 5cd782490b1bebf29544c1d92e77a930
- SHA1 881ba2f99f4a9cdc2ebc1545aa298984e0b1f372
- SHA512 64612d38b17649a69bf5ea42ee690d985601bbe64f22c27521e4568118398e7774edec52cfc457cb048393ff000206952d6ef9dc643bc7b5f0b8f223dced1029
- MD5 SHA1 SHA512
maldoc.yara
- SHA256 73173fac66c3e64357801d3712bcfcb6a012170a3aed281040b7a1d5309eed78
- MD5 6c9718a17c10ca8a0988bdfa5bf48d16
- SHA1 f08fad26d23848f2cbd5329ff85bee2a1f618def
- SHA512 d5dc48c52b38ce0430749a50a6dcc095c17b84ac690dddf2be8e790b22e6cb708591abc47f690f21c076ad8329b4ce25887427a67758a506dc9d73805a7fecf7
- SSDEEP 192:Q3qZBZN3XiaZhZ8gZUZDNDZaZgZBZzjZkxmbZaNdZdZqrH:B3XivNNqSH
- MD5 SHA1 SHA512 SSDEEP
oledump.py
- SHA256 8902aaf410e4400728817162ce08106048ecb6a4a66a14ed7712426f9400b3d0
- MD5 73216e54933df59ebcb3c121dc2bb2b3
- SHA1 2baa74630f14ce5837383c99c43d55728027d650
- SHA512 3ea24d5f3486411ac7ef7c3f443f667dd2c426bc4f42d001df19fef504246ea96ccd4756b7d87ebda6e051dee7def1ebb0a98ddc75ce2aa3d07755943cca6a61
- SSDEEP 768:YqGPmgclfTo/c/9FB9RtSUVt9NB9RtSPe1Du3wKHMVmA/CGm4qb+c5tQCOCgjD1Y:E7cJHVhjnQAdtdJ0bC/ZsR4HejU5qKkt
- MD5 SHA1 SHA512 SSDEEP
plugin_biff.py
- SHA256 2031e6a7001c44532cbda669fed36218ceafd2bcc9c2f1458caf21a6e7b08547
- MD5 d74fe593741147c60e2a3f7685a3699a
- SHA1 9a71d64062338971655e45f06a1dff5a4d599811
- SHA512 76e6d4c412192799ac877fc1d3f5adb3f5c074bbce1a0e99c1abd567a0961b6bad6fc123cc1ee08dfba62b7a72c923db5221e05bf9d1c27e2c05c52a73378b52
- SSDEEP 1536:/LTuVCzjRet7e1/cX9p9v3BevapX4Rb7bm82lYRQQ8EotT68PllHGLoqDX1qHsG2:/zu9yb7bazjG0qD4K5q6pJwA2K
- MD5 SHA1 SHA512 SSDEEP
plugin_clsid.py
- SHA256 04c0105d0fb3658d47ed73e8958029eaefc23fc9df6d9f53a70a1fb5e2defa07
- MD5 e7689a42210d83e7dd9ed36690e06067
- SHA1 d7237f8e606a61a77d2d9920838003a42c953695
- SHA512 9625bcd63fa28994169d6c8c5d431d719f9a11110a07387612cafe73a168a46d80dd9fdf28669ec2fcb98c4985c5e4e7fa17ed9f3ac13225286fad0c18c85407
- MD5 SHA1 SHA512
plugin_dridex.py
- SHA256 abcdd7d762d083e381c8cc8f9b6ab30499fbd87430c4acb4a9805a14d7b91fdd
- MD5 8156ba189ffbfc5670cf2144d7c60402
- SHA1 9396e4650c5691ec94f57c96811599abfc3be6eb
- SHA512 a27fcbce8ada58d820c308f63fa5c80a4898260beeba60af1c77426e43781e4ba847d7b4d417c3b62022a4640a106c83aa8b292c28a14ec0e15049fbfea52049
- SSDEEP 192:BW9kTWpO/21vZChCW43Z/sUH+DJoBSDI+uPDq2F9Dha08pWaGgWH:I988I2ChGiJ5czHJ8pWaGgWH
- MD5 SHA1 SHA512 SSDEEP
plugin_hifo.py
- SHA256 87a4855aca7e3d21219b88d1843386396afc94b6e8fd581d86f752110f760b49
- MD5 e4fc3406928f74d0e023cd29d861caa5
- SHA1 d885483940c776fff0f971a86654117636e20bef
- SHA512 b9d3839379868a187f323663ee24ab2603f2a2acf2819ce0cb46063cd92c344d1f009355b202a9a79696b0f2282a0e9e3f40741276c2d2b131dbec0c81fac866
- MD5 SHA1 SHA512
plugin_http_heuristics.py
- SHA256 d750895bec1d57bc786db545b767f5c5064412ab86848ae744e8c60b4648aa15
- MD5 123156303a908de77489423551402bed
- SHA1 91f66c84ddc36918d7f01d1d757dd3a8d616abf4
- SHA512 c14416d161f3e3b4f8a45abbc4cde9c9aaf9e3c5b0dabe33dcbc0d9ad529bad6033390e2dfd313e2daa833065f7168997cc818f1e0bf4ccfc46891c565de1a06
- SSDEEP 96:uGGPb9+vr9+fRlixWcXLiYxQDSIZiNaNSIXmQJtdxtX8iAAoP:9Ogvr86WcXLiYyilKdsAoP
- MD5 SHA1 SHA512 SSDEEP
plugin_jumplist.py
- SHA256 875a7e66cbc42318f800f3294e877b7e651311714c093509937f0e8c7ad3cb9e
- MD5 1f6040ce94acae29d2785f9e056446ef
- SHA1 eb6465ff57027a7eef8bcb775e886b853fbb54b1
- SHA512 96ba32a23cb17ec564bdc9126c8709b6d17ecade50852b61c5adc8685ee8c9b9465012a1e1cce414b8c631b67eae31401dc67ebff3971688f3bd44e3096010fc
- SSDEEP 96:Io/mj0lBxnEbh3EjyZpFEg43liSITibiEijbyHWpMhn:I8mIlBk3EjyZpFEg43liDibiEE5pw
- MD5 SHA1 SHA512 SSDEEP
plugin_linear.py
- SHA256 eb9a5f530476bcb83e1802fce8d47307172f2d5753cea0331baa48f692f46373
- MD5 44d4f8a8a8312abeafa84aa86742b087
- SHA1 1860a9cda98693bfae05198e13f173cd4fe6f661
- SHA512 0cabb085152b86bf7e29aed09539f47bad778150fc2364c42f5c52c97c2e3c4f95df34ed7ee5f1f47d6dbaa16f54e93357b1d7d27baeefe5a587cfbcfc880283
- MD5 SHA1 SHA512
plugin_msg.py
- SHA256 29f904dd7401b624e47b088bb8a238b5307263ac355a920f16596b98b08e8ad6
- MD5 38ed999a69cfe537c0645c6b014ce34c
- SHA1 de486f3f23cacadfc57c74da34cdd4f34e7c2deb
- SHA512 499cfdd6a7b44e3d6ac2b341469b1205cc0e0110873be822849d9123abd27b124a9dfff93256cafc6d35ada13fa0abeadf2986e5ea7ea53f643c5c501cedd66f
- SSDEEP 96:ef8rOUgxo3JBlqFUNnC8MKmozjcfDVuMiOy9Xudc4b:Y8DgAJ7qSNzjCDbinp+
- MD5 SHA1 SHA512 SSDEEP
plugin_msg_summary.py
- SHA256 23aea8a82f12450c3313af8b156ea6271ea9493c9b8c35577bb118336744e66e
- MD5 eeaef5f8f40cc223319980c28e403775
- SHA1 f444ffc3e6e67206bc13321bb8d6595ef335239d
- SHA512 eadd5397b3a917b28a1ee2e52d7d12ddfe11bffd939eba2d6f335eb756d8aaa790c2e7fa807e8327766215926e2a4da9e157a22d6a31bfabe3be178b1f13c51f
- SSDEEP 96:C/SxeukxxQuUPOtxeXSo+6VLOJQXCdLTt58GvkGzZYBCq3twhJ1UGxAz:CS87QXtXbLOJQSVTt58LGzNQ
- MD5 SHA1 SHA512 SSDEEP
plugin_msi.py
- SHA256 0c8d0422062b0882ca41a7b4ae3b2da0d5653486e95e79d57e65feaa5f5d7f61
- MD5 ddd1196436f5530d64fff6663549d48f
- SHA1 5a8bbca552d4bc01d0ae6f6dc29cb8a20a45552e
- SHA512 4d8c20edc7a11e9fe64ae2c50ff4ea27c2723c422518a29b52f7faab599fbaa6d587345c72fb37c48300acdc08f4df936bf706e635aee71fb878d88744140850
- MD5 SHA1 SHA512
plugin_office_crypto.py
- SHA256 5fe51dfe9392fbec45807198ee2367d562244751dc351eb82eef58e1b6867015
- MD5 f7df12a6b14c24856370c1e3608f997f
- SHA1 fa399fdb82786d464fda96895d8d781331376dc4
- SHA512 d946032e823f74f2e2c9982a841185d5fa4e6bae75d5a3a76ebfb576817b2d7761bb11b99b5a9474c10a9c4777acfe8e905e6c139f7fa1263a044f93a78e2415
- MD5 SHA1 SHA512
plugin_ppt.py
- SHA256 8f4ca9d7e30afd102b9358a4877ee973efdf3289df2fb629b79e3a538e8613eb
- MD5 f5350cc7255aec33444995900bbae0fc
- SHA1 d53b9258dd4782eed961ebb41ca22af0ae8606dd
- SHA512 4f487fdcee8e50f6fd76e69ea361c308259f7dd944f33e519419c2acbe29e5209f1a758d597fe6ce68f505c923af94db2840376bc435b23603581c0070fe82fb
- SSDEEP 192:qUEpxjzg40+OIL6UmYosNGvfL/9Syd/U7t:yzsXUzoK+D/3U7t
- MD5 SHA1 SHA512 SSDEEP
plugin_str_sub.py
- SHA256 dad916af9b1828f85aa633f40eb520ce33ff004e38c2c06ffc2c8b4d707a091d
- MD5 d2849595b5af40bd722897b470d3ac8e
- SHA1 d8ab979aa95ab8630b8fe8528009a4041d99409b
- SHA512 931e0403867a3b12fbb5865af84c8cc23d9c4872dcaa1870c6c8116e7003516ffae999916b50616a265899836205cc12cfdc857aafb3e360008c27897b617f0a
- MD5 SHA1 SHA512
plugin_stream_o.py
- SHA256 76a8c36e232fd6246ea28a792ad48f6b99377276553f4cef8e866715174b1309
- MD5 c69680cafb49ccdf6384a9ebe9f875d7
- SHA1 cb03a07317336f0ca08d6fb4c7335c4ca2cc5dfe
- SHA512 f289a1ed58decd11c5fed82e6f22d5f7c35157c5b0d56708d75ee499677e2a0cdd1976fe13a7a68addccf99547d7c8d0ba64eec1b88238bbb93031ee1a34ead5
- MD5 SHA1 SHA512
plugin_stream_sample.py
- SHA256 9d20540318899a7550b4e7648c5d31bcd8ff875c7d50c0798356629278ca1b42
- MD5 0e974d5394c8f2474c8bb56abb18f9d0
- SHA1 b52e7f536cf5598a1beaa9fcf973338e24760c07
- SHA512 03d49d5ea3d02db0861693c18a0bfc10dd8d6c0dd6925c1e626bc6174f9338198c3ddc39637ca9fda9c4369e7c9b01df9f2f374a1c3615cf49a676d303b75ff6
- MD5 SHA1 SHA512
plugin_vba.py
- SHA256 428cefdf92996358e2edd154f124bbe4b411ee04b1e2618eed5020287794950a
- MD5 be725a147c8a1adbb0a5d9ec89b72d36
- SHA1 e9490ab9f70fd7ca773da72ed0cf4bdafbbc3bbf
- SHA512 d9a30e3cddbdcb9755b62bd5d5c0def58ec4498a3139f4715864fde4507bb03870444ba8b3dc323b582743f17f50df542ec3027cc763b456d9d9fd1e7c891bff
- SSDEEP 96:AyqZK7R5lMrzUgi34PUg09N7QUTaUp6Uz7c8Wx2U7HH0WvUr4NPDX:tP7RIUY8Dr0d8WMunDsrSPDX
- MD5 SHA1 SHA512 SSDEEP
plugin_vba_dco.py
- SHA256 d0b385f64c596fea19d21cc64daf38d60d10973d08dc2ab56f2ea65d35d4cf85
- MD5 77e69457bb1aed6bbbdbc4d6ad1adc3e
- SHA1 d60593a12f2ca2f394a8d3c55b24d912dea7b4b0
- SHA512 4d19c7cfe828597df44bc0594396d4e6ec85bbae271a5b2273aadb43e856f2a2fd23409e7a2a5308160ae6a0b5f99891c3c41c209ce09e97dbc2c073002c0017
- MD5 SHA1 SHA512
plugin_vba_routines.py
- SHA256 766e89a98c22207a9c10892525d42b2577edc50040152da073ce3964c4064d8f
- MD5 d1fa73e4a982ca72b8a334e350b9c73d
- SHA1 bbc623631a9d11728e092095a88ec777d6c4929b
- SHA512 9e14e3542a4d46746f827c57b8d83eccb626b633e47c72bde310842139eed99a8e366c54f391dd47d83711e68b4cacc724903f891429607d172493ddc360ee20
- MD5 SHA1 SHA512
plugin_vba_summary.py
- SHA256 d3b2b804a5992de17935dc43bd38c4cf371789c90c81f359eb61495b208ec071
- MD5 7ea3be570a678566d2529d69badf8f45
- SHA1 20423c759b416f2ec0912034d45b86dff6404c10
- SHA512 d3630f75be52a4428e8d31a0beea6d1a6955407f172359ff2a464cf6853c0c91164ddcc33fbe1cfb6ad18f0b50ecd3c339b0331c23800372cb41c4f9133f4010
- MD5 SHA1 SHA512
plugin_vbaproject.py
- SHA256 02cb4e8fb79e9437145473d41c59dd2ab04d55d069085e57e898daa0f2ee77b2
- MD5 7e913e5e1a798cb40ad331ece2be1e1c
- SHA1 20fd112918542100aa6c4eae355ddb466bbecca9
- SHA512 085428f72a04b2786b810c63ccf3fbc3135bdd5647e064b71473e66e04d1e9aa2fa192f7132ed12d39b9f91dec15d6e389696ecd67b9896d71bec66ee1bf04a2
- SSDEEP 384:zSGaF70iUZ6l2dgyrZa0obavtGKvJEoMw8LJcTt/vf3yRTVBY9IvLWV/ds0snW2R:xi/2lYRbEQ8EoMkTtiYCvKmWPEMtK
- MD5 SHA1 SHA512 SSDEEP
plugin_version_vba.py
- SHA256 11b54656aa85b70eabf8f90dde2e2d119b116761bd2e17210538368896c8f869
- MD5 634509790970174161c8c05d04160a4d
- SHA1 eb1ebac727c9d103d9c5ae607bdd69129f34c37e
- SHA512 f0a08e930be0220b9a6de0309d6f975d3b58bcb44e9589cd2c6b81b7bd32d4266e5d15855ee1480b2004afcdfa67c61a9965337a0c39bbbb8a64a2928ec331a8
- MD5 SHA1 SHA512
vba.yara
- SHA256 1089207ca73dd73d1f8e32f1b312d76d1a582e55b63dfc906d94a641d89fb7d8
- MD5 272f34cafb79c10e09c4b078cb71c230
- SHA1 361fe32b94e56c3ff22f652eacd6722c06cdb8ac
- SHA512 1c41ea3d45eda3cae68f02861b30168af78d75a4cebfa7378aa095c0e998b4d94f3007f60f080600f7cbd51be78b795a23908201533019963bdf104a384b9642
- MD5 SHA1 SHA512
tools/re-search.py
- SHA256 33d5060802555b5d197200fa4759a24ba2f3daad02e6255ca2f9a1f0216c79c0
- MD5 c5e8b679df2ae7516901d2fb84ee5bf3
- SHA1 fdc13bdfeaba47e1e95d5267037cbe16045eb8c2
- SHA512 c0ad29bbfee157bc031742ac62aee18f40799a0fa42b61a2e1184d25927fe2a5bcd794dcb672aa721d6577093df829e850267b1ff111af69f08f4f4e2608d673
- SSDEEP 384:rKt3sv8fJVyUY4PTsvHlwJJ257xfU5KysH+cQcQ+OrexCJp6RDRN6FrcRDMjccEq:rfv8fJVywTU+J25VfU5KVQ0xCK9bh12t
- MD5 SHA1 SHA512 SSDEEP
tools/reextra.py
- SHA256 5112741782616616362dda4870171280c053a634e48b7f75e28396909303f0c3
- MD5 6eaae98129246db6647ba4ee5da2bfb4
- SHA1 486e0d6269f7f4d3fb46c3b3fab6fb277105cebf
- SHA512 8ae6d5e8f392ae827963d2555af83d306ab90df5aeebcabf3c8140769350b5007c5447107192a229d91ee8c9798ca8bf8866476b8da7bd1adcd1a7eac50bfad8
- SSDEEP 384:06VzQdo5F4fDQAC16aHVAAXdrpxuaFBoC4qeyNRSZ4kY+XIpk8WmI0ULjRlhnGJ7:bVkdjfMACXVAuxOOs4PBVUxlgl/mDg7
- MD5 SHA1 SHA512 SSDEEP
tools/reextra.pyc
- SHA256 d824866160ef3e11c75e798ac67e6321f8904dfb8b7b13f1271dfafd4b1e9c26
- MD5 26d816e7a66a9b755be98977fd7ec94f
- SHA1 51fdd52e8a74b85474655673c933d1486369f0c2
- SHA512 0528a624b7bf595f26c5e6ad6b22709088a378f3e831bce0ae1619dfe9b0733f26f5cebed00613605357610ecd51046af8a9c83e43e8493247b5197e7c645f2d
- SSDEEP 1536:wDWEbOQgsZwoSlKyxcQQkQrqws4PBV4al/x85e77mr:nElZLAKicCAqbUxse7Cr
- MD5 SHA1 SHA512 SSDEEP
tools/xmldump.py
- SHA256 f6cd518892efc087899eb99b8545d0ff43ec555052925f99d4a513ce2f1a8be9
- MD5 faea5080eda9431825f548b4dc695287
- SHA1 c875f855cf1ad5284172ae36fa1fbee6d3c5c795
- SHA512 e733e28c684e9ddd8b781be170dcb06ab5bc2758970bc0d063120f9adcd503c96471d6512e3218e983badb3cc95f4f0dbf51d0b48e2f7e389b2bbb35bee5f59b
- SSDEEP 384:8rkmbboYy8PScqY4SkVHpEbH5VItDOMaTwJRFjDJ72wxrKAnrENdtFJq67SObltp:8rbbboB8PScqY4SkVHpEbH5VItDOMaTn
- MD5 SHA1 SHA512 SSDEEP
tools/zipdump.py
- SHA256 f05726b382054380b0559fa9f44017b505fab9ab6272f894973a31addefa695c
- MD5 28461ac0e66c71823e5881994c24680b
- SHA1 58763ec56cc666e99f422a7ef93f25a4a95cc24d
- SHA512 9af0817d4a3ccd6f46e00db97c8c27242c26a06533dc535447028821139629d82a53354bfd3435ea3d492d034d957bb19d30cb4fd6374b0735223aef78d2867e
- SSDEEP 3072:bzogKBH5YS2dbcWHXyw8HozdJEAoekieCFg:vogKwx8Ha0ekieCFg
- MD5 SHA1 SHA512 SSDEEP