Overview
overview
3Static
static
11.00.89.zip
windows10-2004-x64
11.00.89/!s...2).cmd
windows10-2004-x64
11.00.89/!s...4).cmd
windows10-2004-x64
11.00.89/p_...ons.sq
windows10-2004-x64
31.00.89/tr..._3.vbs
windows10-2004-x64
11.00.89/tr...c_5.us
windows10-2004-x64
31.00.89/version.us
windows10-2004-x64
31.00.89/z_sql1.zu
windows10-2004-x64
31.00.89/z_sql2.zu
windows10-2004-x64
31.00.89/z_sql3.zu
windows10-2004-x64
31.00.89/z_sql4.zu
windows10-2004-x64
31.00.89/zc...p.dump
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
1.00.89.zip
Resource
win10v2004-20240221-en
Behavioral task
behavioral2
Sample
1.00.89/!start_update(x32).cmd
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
1.00.89/!start_update(x64).cmd
Resource
win10v2004-20240221-en
Behavioral task
behavioral4
Sample
1.00.89/p_kill_sessions.sq
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
1.00.89/trans_pas_to_pas_exec_3.vbs
Resource
win10v2004-20240221-en
Behavioral task
behavioral6
Sample
1.00.89/trans_pas_to_pas_exec_5.us
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
1.00.89/version.us
Resource
win10v2004-20240221-en
Behavioral task
behavioral8
Sample
1.00.89/z_sql1.zu
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
1.00.89/z_sql2.zu
Resource
win10v2004-20240221-en
Behavioral task
behavioral10
Sample
1.00.89/z_sql3.zu
Resource
win10v2004-20240221-en
Behavioral task
behavioral11
Sample
1.00.89/z_sql4.zu
Resource
win10v2004-20240221-en
Behavioral task
behavioral12
Sample
1.00.89/zcrystalrep_dump.dump
Resource
win10v2004-20240221-en
General
-
Target
1.00.89.zip
-
Size
63.9MB
-
MD5
618a6b4b4f2bf02ce2ca46290abcb746
-
SHA1
52e1a1b9dfe748839dda0010da226e538cef73e6
-
SHA256
7c16240035649612d7f060d017a6f25790b74dd7a0d44208d8baf18eb7659125
-
SHA512
efe806350a37863e5532147cee92d6fb07ef48c14fe94bac5eb891f0e9841aaa87658bb0dbf0be47b8fb6ae8e373aef25abf196c6388f3d7cc1f325958add425
-
SSDEEP
1572864:KScMux9cbaxug2KI17SRtxQBiSx7VWS0GJzoKmV4:hi9cbazI17SuiSFVvVmC
Malware Config
Signatures
Files
-
1.00.89.zip.zip
-
1.00.89/!start_update(x32).cmd
-
1.00.89/!start_update(x64).cmd
-
1.00.89/p_kill_sessions.sq
-
1.00.89/trans_pas_to_pas_exec_3.us.vbs
-
1.00.89/trans_pas_to_pas_exec_5.us
-
1.00.89/version.us
-
1.00.89/z_sql1.zu
-
1.00.89/z_sql2.zu
-
1.00.89/z_sql3.zu
-
1.00.89/z_sql4.zu
-
1.00.89/zcrystalrep_dump.dump