Overview
overview
6Static
static
4trader-dal...ck.zip
windows7-x64
1trader-dal...ck.zip
windows10-2004-x64
1trader-dal...r8.mp4
windows7-x64
1trader-dal...r8.mp4
windows10-2004-x64
6trader-dal...r8.mp4
windows7-x64
1trader-dal...r8.mp4
windows10-2004-x64
6trader-dal...r8.pdf
windows7-x64
1trader-dal...r8.pdf
windows10-2004-x64
1trader-dal...t4.pdf
windows7-x64
1trader-dal...t4.pdf
windows10-2004-x64
1trader-dal...t4.ex4
windows7-x64
3trader-dal...t4.ex4
windows10-2004-x64
3trader-dal...r8.msi
windows7-x64
6trader-dal...r8.msi
windows10-2004-x64
6trader-dal...t4.jpg
windows7-x64
3trader-dal...t4.jpg
windows10-2004-x64
3trader-dal...r8.jpg
windows7-x64
3trader-dal...r8.jpg
windows10-2004-x64
3Behavioral task
behavioral1
Sample
trader-dales-proprietary-volume-profile-pack.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
trader-dales-proprietary-volume-profile-pack.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
trader-dales-proprietary-volume-profile-pack/fixed-volume-profile-ninjatrader8.mp4
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
trader-dales-proprietary-volume-profile-pack/fixed-volume-profile-ninjatrader8.mp4
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
trader-dales-proprietary-volume-profile-pack/flexible-volume-profile-ninjatrader8.mp4
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
trader-dales-proprietary-volume-profile-pack/flexible-volume-profile-ninjatrader8.mp4
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
trader-dales-proprietary-volume-profile-pack/td-volume-profile-pack-quick-guide-ninjatrader8.pdf
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
trader-dales-proprietary-volume-profile-pack/td-volume-profile-pack-quick-guide-ninjatrader8.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
trader-dales-proprietary-volume-profile-pack/tds-flexible-volume-profile-instructions-1.1-mt4.pdf
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
trader-dales-proprietary-volume-profile-pack/tds-flexible-volume-profile-instructions-1.1-mt4.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
trader-dales-proprietary-volume-profile-pack/tds-flexible-volume-profile-mt4.ex4
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
trader-dales-proprietary-volume-profile-pack/tds-flexible-volume-profile-mt4.ex4
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
trader-dales-proprietary-volume-profile-pack/tdvolumeprofilepackinstaller-ninjatrader8.msi
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
trader-dales-proprietary-volume-profile-pack/tdvolumeprofilepackinstaller-ninjatrader8.msi
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
trader-dales-proprietary-volume-profile-pack/volume-profile-mt4.jpg
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
trader-dales-proprietary-volume-profile-pack/volume-profile-mt4.jpg
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
trader-dales-proprietary-volume-profile-pack/volume-profile-ninjatrader8.jpg
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
trader-dales-proprietary-volume-profile-pack/volume-profile-ninjatrader8.jpg
Resource
win10v2004-20240226-en
General
-
Target
trader-dales-proprietary-volume-profile-pack.zip
-
Size
34.2MB
-
MD5
a75a1ee47e1662244d4815b804fba100
-
SHA1
57a0509d4f245d3d34a0b5d5cc5af8b41ed23366
-
SHA256
c2754fd7ec6020537e7d03de8779f4dbe4b70b18571b0f8bcc81a04ad6c67dc3
-
SHA512
fd982f7bb9bbc5ec745e8ce9e91db9ef294bef486dc17dfc0fb0507fbab548b44daa03b1749ae3965908fe27d98676788aa1e344319eb6abf2951680372d65fd
-
SSDEEP
786432:b8DaUgrj1ufEz8v4FKSQmyO3uAnpF7Xr/dpa96E:Dhr564FKSQ/O3VFjr/HU
Malware Config
Signatures
-
HTTP links in PDF interactive object 3 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule sample pdf_with_link_action static1/unpack001/trader-dales-proprietary-volume-profile-pack/td-volume-profile-pack-quick-guide-ninjatrader8.pdf pdf_with_link_action static1/unpack001/trader-dales-proprietary-volume-profile-pack/tds-flexible-volume-profile-instructions-1.1-mt4.pdf pdf_with_link_action
Files
-
trader-dales-proprietary-volume-profile-pack.zip.zip .pdf polyglot
Password: Inesil.27
-
trader-dales-proprietary-volume-profile-pack/fixed-volume-profile-ninjatrader8.mp4
-
trader-dales-proprietary-volume-profile-pack/flexible-volume-profile-ninjatrader8.mp4
-
trader-dales-proprietary-volume-profile-pack/td-volume-profile-pack-quick-guide-ninjatrader8.pdf.pdf
Password: Inesil.27
-
https://members.trader-dale.com/forex-trading-course/
-
https://members.trader-dale.com/forex-trading-course/cs-CZ
-
-
trader-dales-proprietary-volume-profile-pack/tds-flexible-volume-profile-instructions-1.1-mt4.pdf.pdf
Password: Inesil.27
-
https://tickstory.com/
-
http://trader-dale.com
-
http://gmail.com
-
https://tickstory.com
-
-
trader-dales-proprietary-volume-profile-pack/tds-flexible-volume-profile-mt4.ex4
-
trader-dales-proprietary-volume-profile-pack/tdvolumeprofilepackinstaller-ninjatrader8.msi.msi
-
trader-dales-proprietary-volume-profile-pack/volume-profile-mt4.jpg.jpg
Password: Inesil.27
-
trader-dales-proprietary-volume-profile-pack/volume-profile-ninjatrader8.jpg.jpg
Password: Inesil.27