Behavioral task
behavioral1
Sample
28358575bda2bbec23997cabe77a9852c19b30f09a3d94180778bd7ffe57eb4a.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28358575bda2bbec23997cabe77a9852c19b30f09a3d94180778bd7ffe57eb4a.pdf
Resource
win10v2004-20240226-en
General
-
Target
28358575bda2bbec23997cabe77a9852c19b30f09a3d94180778bd7ffe57eb4a
-
Size
23.7MB
-
MD5
3786bb6779390a7ac373999174cf4b7b
-
SHA1
fe2189e8a113e446d3a32509fba403150d3a5bd1
-
SHA256
28358575bda2bbec23997cabe77a9852c19b30f09a3d94180778bd7ffe57eb4a
-
SHA512
2f46e21006b64593c94b0b5bcabed330fb7be43b465ead762325d5276066fb80dbe30173dfc0d2feedd3302ce00483d63b403e1a4e03c65f409c1b72c989c60a
-
SSDEEP
393216:T0aXfqzozYEMggR03v9KKHWn2qXbageSM5S8YAlNQqcDyHoiSAOD5pvFs7KPps5l:oaXdzYZggYBqXbaTdwq3NcoSn5tgKPpE
Malware Config
Signatures
Files
-
28358575bda2bbec23997cabe77a9852c19b30f09a3d94180778bd7ffe57eb4a.pdf
-
https://en.wikipedia.org/wiki/Protocol_stack
-
http://whatismyipaddress.com/
-
https://www.coursera.org/learn/computer-networking/lecture/BVuUA/routing-tables
-
https://www.iana.org/
-
https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml
-
https://packetlife.net/media/library/23/common_ports.pdf
-
https://www.wi-fi.org/discover-wi-fi/wi-fi-certified-6
-
https://grouper.ieee.org/groups/802/11/Reports/802.11_Timelines.htm
-
https://www.coursera.org/learn/os-power-user/lecture/Tq7qF/windows-disk-partitioning-and-formatting-a-filesystem
-
https://www.coursera.org/learn/os-power-user/lecture/VaA1k/working-with-logs
-
https://docs.microsoft.com/en-us/windows/win32/msi/installation-package
-
https://docs.microsoft.com/en-us/windows/win32/appxpkg/make-appx-package--makeappx-exe-
-
https://docs.microsoft.com/en-us/windows/win32/debug/pe-format
-
https://docs.microsoft.com/en-us/troubleshoot/windows-client/deployment/command-switches-supported-by-self-extractor-package
-
https://fossbytes.com/10-google-play-store-alternatives/
-
https://developer.apple.com/app-store/review/guidelines/
-
https://developer.apple.com/business/custom-apps/
-
https://developer.android.com/guide/app-bundle
-
https://developers.google.com/android/work/play/custom-app-api/get-started
-
https://support.apple.com/en-us/HT202180
-
https://support.apple.com/guide/deployment/manage-software-updates-depc4c80847a/web
-
https://support.google.com/googleplay/answer/113412?hl=en
-
https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2#WindowsVersion=Windows_11
-
https://www.linuxfoundation.org/blog/classic-sysadmin-linux-101-updating-your-system/
-
https://manpages.ubuntu.com/manpages/bionic/en/man8/apt.8.html
-
https://drive.google.com/file/d/1qDFyYB5uYLranPk9pZBz0heq0B5hmroH/view
-
https://www.coursera.org/learn/os-power-user/lecture/58R7e/windows-swap
-
https://www.coursera.org/learn/os-power-user/lecture/WlEEL/linux-swap
-
https://www.putty.org/
-
https://www.vandyke.com/cgi-bin/releases.php?product=securecrt
-
https://sysprogs.com/SmarTTY/download/
-
https://mremoteng.org/download
-
https://mobaxterm.mobatek.net/download.html
-
https://www.virtualbox.org/wiki/Downloads
-
https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/
-
https://www.vmware.com/products/workstation-player/workstation-player-evaluation.html
-
https://www.redhat.com/en/resources/red-hat-virtualization-datasheet
-
https://www.virtualbox.org/manual/ch01.html
-
https://www.tomsguide.com/how-to/how-to-clone-a-hard-drive-on-windows
-
https://nerdtechy.com/best-hard-drive-duplicator-cloner-docking-station
-
https://docs.microsoft.com/en-us/mem/configmgr/osd/deploy-use/methods-to-deploy-enterprise-operating-systems
-
https://man7.org/linux/man-pages/man1/dd.1.html
-
https://docs.microsoft.com/en-us/troubleshoot/windows-server/performance/performance-overview
-
https://www.techtarget.com/searchenterprisedesktop/tip/How-to-scan-and-repair-disks-with-Windows-10-Check-Disk
-
https://docs.microsoft.com/en-us/windows-server/storage/disk-management/overview-of-disk-management
-
https://www.windowscentral.com/how-use-event-viewer-windows-10
-
https://docs.microsoft.com/en-us/windows/win32/sysinfo/registry
-
https://windowsreport.com/system-configuration-windows-10/
-
https://support.microsoft.com/en-us/windows/free-up-drive-space-in-windows-85529ccb-c365-490d-b548-831022bc9b32#WindowsVersion=Windows_10
-
https://support.microsoft.com/en-us/windows/low-disk-space-error-due-to-a-full-temp-folder-8eb375af-c5d4-22ac-3f3a-ac0a98382749#ID0EDD=Windows_10
-
https://support.microsoft.com/en-us/windows/manage-drive-space-with-storage-sense-654f6ada-7bfc-45e5-966b-e24aded96ad5
-
https://docs.microsoft.com/en-us/windows/deployment/update/windows-update-resources
-
http://manpages.ubuntu.com/manpages/bionic/man1/script.1.html
-
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.host/start-transcript?view=powershell-6
-
http://manpages.ubuntu.com/manpages/bionic/man1/ansi2txt.1.html
-
http://manpages.ubuntu.com/manpages/bionic/man1/ansi2html.1.html
-
http://recordmydesktop.sourceforge.net/about.php
-
https://obsproject.com/
-
https://www.videolan.org/vlc/index.html
-
https://support.microsoft.com/en-us/windows/how-to-use-remote-desktop-5fe128d5-8fb1-7a23-3b8a-41e636865e8c
-
https://www.microsoft.com/en-us/worklab/work-trend-index/hybrid-work
-
https://www.flexjobs.com/blog/post/remote-work-statistics/
-
https://www.coursera.org/learn/system-administration-it-infrastructure-services/lecture/5dQlq/configuring-dns-with-dnsmasq
-
https://www.coursera.org/learn/system-administration-it-infrastructure-services/lecture/eGiJ8/configuring-dhcp-with-dnsmasq
-
https://support.google.com/a/answer/174124
-
https://support.google.com/a/answer/33786
-
https://support.google.com/a/answer/2466580
-
https://www.fcc.gov/consumers/guides/stop-unwanted-robocalls-and-texts
-
https://support.microsoft.com/en-us/office/10-tips-on-how-to-help-reduce-spam-55f756e8-688b-41c3-a086-8f68ccc592f6
-
https://us.norton.com/internetsecurity-how-to-deal-with-spam-text-messages.html
-
https://support.google.com/android/answer/2819582?hl=en
-
https://support.apple.com/en-us/HT203977#icloud
-
https://support.microsoft.com/en-us/office/set-up-office-apps-and-email-on-a-mobile-device-7dabb6cb-0046-40b6-81fe-767e0b1f014f
-
https://support.google.com/a/users/answer/9282663#device-setup
-
https://support.hp.com/us-en/drivers/printers
-
https://www.usa.canon.com/internet/portal/us/home/support/drivers-downloads
-
https://www.support.xerox.com/
-
https://www.ricoh-usa.com/en/support-and-download
-
https://www.hp.com/us-en/shop/tech-takes/update-settings-for-quality-printing
-
https://support.microsoft.com/en-us/windows/share-your-network-printer-c9a152b5-59f3-b6f3-c99f-f39e5bf664c3
-
https://www.support.xerox.com/en-us/article/en/2108787
-
https://support.hp.com/us-en/document/ish_3186181-3148520-16
-
https://www.dell.com/support/kbdoc/en-us/000175311/how-to-configure-your-pc-or-server-for-smb-server-message-block-scanning-on-dell-laser-printers
-
https://www.support.xerox.com/en-us/article/en/Uv2Na7HiId04WLNUcziK48
-
https://computer.howstuffworks.com/inkjet-printer.htm
-
https://computer.howstuffworks.com/laser-printer.htm
-
https://3dinsider.com/3d-printer-types/
-
https://support.microsoft.com/help/4027370/windows-10-view-the-print-queue
-
https://support.apple.com/guide/mac-help/mchle453335f/mac
-
https://help.ubuntu.com/stable/ubuntu-help/printing-cancel-job.html
-
https://support.microsoft.com/help/4028622/windows-10-how-to-set-a-default-printer
-
https://support.apple.com/guide/mac-help/change-default-printer-a-printers-mac-mchlp1036/mac
-
https://help.ubuntu.com/stable/ubuntu-help/printing-setup-default-printer.html
-
https://support.microsoft.com/help/4015386/windows-10-install-printer
-
https://support.apple.com/guide/mac-help/mh14004/mac
-
https://support.apple.com/guide/mac-help/mac-print-a-printer-connected-windows-mchlp2437/mac
-
https://help.ubuntu.com/stable/ubuntu-help/printing.html
-
https://docs.microsoft.com/windows/win32/printdocs/microsoft-xps-document-writer
-
https://support.apple.com/guide/mac-help/mchlp1531/mac
-
https://help.ubuntu.com/stable/ubuntu-help/printing-to-file.html
-
https://support.microsoft.com/help/4089224/windows-10-share-network-printer
-
https://support.apple.com/guide/mac-help/mchlp2424/mac
-
https://support.apple.com/guide/mac-help/mh14004/10.14/mac/10.14
-
https://help.ubuntu.com/community/NetworkPrintingWithUbuntu#Printing_from_Ubuntu
-
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831468(v=ws.11)
-
https://help.ubuntu.com/lts/serverguide/cups.html
-
https://www.coursera.org/learn/system-administration-it-infrastructure-services/ungradedWidget/3NxgP/troubleshooting-printer-issues
-
https://www.coursera.org/learn/system-administration-it-infrastructure-services/ungradedWidget/bZBGZ/common-printer-types
-
https://en.wikipedia.org/wiki/List_of_HTTP_status_codes
-
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview
-
https://cloud.google.com/gcp?utm_source=google&utm_medium=cpc&utm_campaign=na-US-all-en-dr-bkws-all-all-trial-e-dr-1011347&utm_content=text-ad-none-any-DEV_c-CRE_491349594127-ADGP_Desk+%7C+BKWS+-+EXA+%7C+Txt+~+Google+Cloud+Platform+Core-KWID_43700060017921803-kwd-6458750523&utm_term=KW_google%20cloud-ST_google+cloud&gclid=CjwKCAjwwo-WBhAMEiwAV4dybYTq7YVFRkH9YHe5b7c2rEtPikbIDbl4vDxaJVvDzpdmg4lFEa0mWxoCM-YQAvD_BwE&gclsrc=aw.ds
-
http://www.example.com/
-
https://azure.microsoft.com/en-us/overview/what-is-cloud-computing/
-
https://aws.amazon.com/getting-started/
-
https://cloud.google.com/docs/overview/
-
https://www.coursera.org/learn/os-power-user/lecture/aXBeM/windows-filesystem-repair
-
https://www.coursera.org/learn/os-power-user/lecture/1d4Y4/linux-filesystem-repair
-
https://www.ibm.com/docs/en/aix/7.2?topic=f-fsck-command#fsck__row-d3e118376
-
https://www.ibm.com/docs/en/aix/7.2?topic=f-fsck-command#fsck__row-d3e118436
-
https://www.ibm.com/docs/en/aix/7.2?topic=f-fsck-command#fsck__row-d3e118508
-
https://www.ibm.com/docs/en/aix/7.2?topic=f-fsck-command#fsck__row-d3e118344
-
https://www.coursera.org/learn/system-administration-it-infrastructure-services/lecture/s8fRo/group-policy-creation-and-editing
-
https://www.coursera.org/learn/system-administration-it-infrastructure-services/lecture/NKERN/group-policy-troubleshooting
-
https://www.coursera.org/learn/system-administration-it-infrastructure-services/lecture/iWEiS/mobile-device-management-mdm
-
https://www.coursera.org/learn/system-administration-it-infrastructure-services/supplement/LnGpY/supplemental-readings-for-mobile-device-management-mdm
-
https://www.isaca.org/resources/isaca-journal/issues/2016/volume-5/geolocationthe-risk-and-benefits-of-a-trending-technology
-
https://analyticsindiamag.com/understanding-the-5-factors-of-multi-factor-authentication/
-
https://www.dhs.gov/biometrics
-
https://hal.archives-ouvertes.fr/hal-00912435/PDF/A_Review_on_Authentication_Methods.pdf
-
https://www.intechopen.com/journals/1/articles/100
-
https://www.globalpaymentsintegrated.com/en-us/blog/2020/04/21/what-is-the-difference-between-nfc-and-rfid
-
https://guides.frame.work/Guide/Fingerprint+Reader+Replacement+Guide/91
-
https://www.coursera.org/learn/it-security/lecture/0uTpI/kerberos
-
https://www.techtarget.com/searchmobilecomputing/tip/Top-4-mobile-security-threats-and-challenges-for-businesses
-
https://www.techtarget.com/searchmobilecomputing/The-ultimate-guide-to-mobile-device-security-in-the-workplace
-
https://www.f5.com/labs/articles/education/what-is-the-cia-triad
-
https://www.coursera.org/learn/it-security/lecture/ommXt/lets-get-rid-of-wep
-
https://docs.microsoft.com/en-us/learn/modules/defender-introduction/
-
https://mslearn.cloudguides.com/guides/Protect%20your%20organization%20with%20Microsoft%20365%20Defender
-
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint
-
https://docs.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/defender-vulnerability-management
-
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/overview
-
https://docs.microsoft.com/en-us/defender-for-identity/
-
https://docs.microsoft.com/en-us/cloud-app-security/
-
https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/how-user-account-control-works
-
https://www.coursera.org/learn/it-security/supplement/Gguk0/supplemental-reading-for-disk-encryption
-
https://www.k-state.edu/ksis/help/gettingstarted/Disabling-Popup-Blockers.html
-
https://kb.iu.edu/d/ahic
-
https://www.lifewire.com/browsing-incognito-445990
-
https://support.google.com/chrome/answer/185277?hl=en&co=GENIE.Platform%3DDesktop
-
https://support.mozilla.org/en-US/kb/disable-firefox-sync
-
https://support.microsoft.com/en-us/microsoft-edge/change-and-customize-sync-settings-in-microsoft-edge-be529080-f2e9-b642-538f-976956b8da6b#
-
https://adblockplus.org/tutorials
-
https://blog.malwarebytes.com/how-tos-2/2020/01/dubious-downloads-how-to-check-if-a-website-and-its-files-are-malicious/
-
https://www.wired.com/story/best-password-managers/
-
https://www.cisa.gov/uscert/ncas/tips/ST04-014
-
https://media.defense.gov/2019/Jul/16/2002158057/-1/-1/0/CSI-BLOCKING-UNNECESSARY-ADVERTISING-WEB-CONTENT.PDF
-
https://www.cisa.gov/sites/default/files/publications/Capacity_Enhancement_Guide-Securing_Web_Browsers_and_Defending_Against_Malvertising_for_Federal_Agencies.pdf
-
https://blog.malwarebytes.com/privacy-2/2021/02/browser-sync-what-are-the-risks-of-turning-it-on/
-
https://docs.microsoft.com/en-us/security/trusted-root/participants-list
-
https://hddguru.com/
-
https://www.cisa.gov/tips/st18-005
-
https://www.techtarget.com/whatis/definition/BYOD-bring-your-own-device
-
https://www.dialpad.com/blog/byod-policy/
-
https://www.manageengine.com/mobile-device-management/what-is-mdm.html
-
https://www.manageengine.com/mobile-device-management/enterprise-mobility-management-emm.html?network=g&device=c&keyword=enterprise%20mobility%20management&campaignid=10047966928&creative=479014654278&matchtype=p&adposition=&placement=&adgroup=108476453023&targetid=kwd-10879221579&gclid=Cj0KCQjwkruVBhCHARIsACVIiOxm1_vkFiOK2IXWj2cw2f_7lJGQdIzjl9sn0nY9nl9i9_TKolc9i_IaAluCEALw_wcB
- Show all
-