Overview
overview
4Static
static
1malicious.zip
windows10-1703-x64
4malicious/...p;.pdf
windows10-1703-x64
1malicious/...sp.pdf
windows10-1703-x64
1malicious/...Fy.pdf
windows10-1703-x64
1malicious/...00.pdf
windows10-1703-x64
1malicious/...sp.pdf
windows10-1703-x64
1malicious/...gs.pdf
windows10-1703-x64
1malicious/...00.pdf
windows10-1703-x64
1malicious/...Xc.pdf
windows10-1703-x64
1malicious/...mn.pdf
windows10-1703-x64
1malicious/...Hq.pdf
windows10-1703-x64
1malicious/...JG.pdf
windows10-1703-x64
1malicious/...Yr.pdf
windows10-1703-x64
1malicious/...Yt.pdf
windows10-1703-x64
1malicious/...A.docx
windows10-1703-x64
1malicious/...S.docx
windows10-1703-x64
1malicious/...M.docx
windows10-1703-x64
1malicious/...b.docx
windows10-1703-x64
1malicious/...s.docx
windows10-1703-x64
1malicious/...H.docx
windows10-1703-x64
1malicious/...J.docx
windows10-1703-x64
1malicious/...M.docx
windows10-1703-x64
1malicious/...V.docx
windows10-1703-x64
1malicious/...G.docx
windows10-1703-x64
1malicious/...C.docx
windows10-1703-x64
1malicious/...x.docx
windows10-1703-x64
1malicious/...N.docx
windows10-1703-x64
1malicious/...f.docx
windows10-1703-x64
1malicious/...i.docx
windows10-1703-x64
1malicious/...U.docx
windows10-1703-x64
1malicious/...W.docx
windows10-1703-x64
1malicious/...K.docx
windows10-1703-x64
1Static task
static1
Behavioral task
behavioral1
Sample
malicious.zip
Resource
win10-20240611-en
Behavioral task
behavioral2
Sample
malicious/000107_DwldYfmcBfRcekeywordsASP1sOp.asp;.pdf
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
malicious/000110_DwldYfmcBfRcekeywordsASP5KzX.asp.pdf
Resource
win10-20240611-en
Behavioral task
behavioral4
Sample
malicious/000112_DwldYfmcBfRcekeywordsASP6kFy.pdf
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
malicious/000114_DwldYfmcBfRcekeywordsASP8cUn.asp%00.pdf
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
malicious/000121_DwldYfmcBfRcexmpkeywordsASP5ZKy.asp.pdf
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
malicious/000123_DwldYfmcBfRcexmpkeywordsASP6Ags.pdf
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
malicious/000125_DwldYfmcBfRcexmpkeywordsASP8JmF.asp%00.pdf
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
malicious/000224_DwldYfmcSsiReflectDnskeywords3rXc.pdf
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
malicious/000229_DwldYfmcSsiReflectDnsxmpkeywords3Omn.pdf
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
malicious/000287_DwldYfmcSsiBfRcekeywords3MHq.pdf
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
malicious/000289_DwldYfmcSsiBfRcexmpkeywords3pJG.pdf
Resource
win10-20240611-en
Behavioral task
behavioral13
Sample
malicious/000326_DwldYfmcEsiReflectkeywords0RYr.pdf
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
malicious/000327_DwldYfmcEsiReflectxmpkeywords0qYt.pdf
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
malicious/000423_DwldYfmcXxeOfficeStylesheetAll0CEA.docx
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
malicious/000425_DwldYfmcXxeOfficeStylesheetAll1anS.docx
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
malicious/000427_DwldYfmcXxeOfficeStylesheetAll2HeM.docx
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
malicious/000429_DwldYfmcXxeOfficeStylesheetAll3eGb.docx
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
malicious/000438_DwldYfmcXxeOfficeStylesheetContentTypes0Krs.docx
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
malicious/000440_DwldYfmcXxeOfficeStylesheetContentTypes1axH.docx
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
malicious/000442_DwldYfmcXxeOfficeStylesheetContentTypes2DiJ.docx
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
malicious/000444_DwldYfmcXxeOfficeStylesheetContentTypes3sdM.docx
Resource
win10-20240404-en
Behavioral task
behavioral23
Sample
malicious/000448_DwldYfmcXxeOfficeParameterEntityContentTypes0iwV.docx
Resource
win10-20240611-en
Behavioral task
behavioral24
Sample
malicious/000449_DwldYfmcXxeOfficeParameterEntityContentTypes1BPG.docx
Resource
win10-20240404-en
Behavioral task
behavioral25
Sample
malicious/000450_DwldYfmcXxeOfficeParameterEntityContentTypes2RDC.docx
Resource
win10-20240611-en
Behavioral task
behavioral26
Sample
malicious/000451_DwldYfmcXxeOfficeParameterEntityContentTypes3vTx.docx
Resource
win10-20240404-en
Behavioral task
behavioral27
Sample
malicious/000452_DwldYfmcXxeOfficeDtdContentTypes0sJN.docx
Resource
win10-20240611-en
Behavioral task
behavioral28
Sample
malicious/000454_DwldYfmcXxeOfficeDtdContentTypes1cWf.docx
Resource
win10-20240404-en
Behavioral task
behavioral29
Sample
malicious/000456_DwldYfmcXxeOfficeDtdContentTypes2Tyi.docx
Resource
win10-20240404-en
Behavioral task
behavioral30
Sample
malicious/000458_DwldYfmcXxeOfficeDtdContentTypes3SBU.docx
Resource
win10-20240404-en
Behavioral task
behavioral31
Sample
malicious/000467_DwldYfmcXxeOfficeStylesheetMain0XAW.docx
Resource
win10-20240404-en
Behavioral task
behavioral32
Sample
malicious/000469_DwldYfmcXxeOfficeStylesheetMain1qsK.docx
Resource
win10-20240404-en
General
-
Target
malicious.zip
-
Size
223KB
-
MD5
601962f449f2bd0545e25b433f4e0fef
-
SHA1
c9564e7be6ea3be07396a64c4c56fdeed6a123a1
-
SHA256
9473d40b1620e37d5db10614a3ea30083aa8906988966e9079232bdaba8a2032
-
SHA512
f8105187fe2aa1cac1a12735a761ae7d2bca9f28ab1ff9ed672eac80d24eace30868c123188299fb867f2ac15196a1bf97c0570d5041eb555732c34d2caf01ca
-
SSDEEP
6144:pm1daLerkoCL2gvC7exrZ8u6d08bY20aQ:cv/rQ6d0UYf
Malware Config
Signatures
Files
-
malicious.zip.zip
-
malicious/000107_DwldYfmcBfRcekeywordsASP1sOp.asp;.pdf.pdf
-
malicious/000110_DwldYfmcBfRcekeywordsASP5KzX.asp.pdf.pdf
-
malicious/000112_DwldYfmcBfRcekeywordsASP6kFy.pdf.pdf
-
malicious/000114_DwldYfmcBfRcekeywordsASP8cUn.asp%00.pdf.pdf
-
malicious/000121_DwldYfmcBfRcexmpkeywordsASP5ZKy.asp.pdf.pdf
-
malicious/000123_DwldYfmcBfRcexmpkeywordsASP6Ags.pdf.pdf
-
malicious/000125_DwldYfmcBfRcexmpkeywordsASP8JmF.asp%00.pdf.pdf
-
malicious/000224_DwldYfmcSsiReflectDnskeywords3rXc.pdf.pdf
-
malicious/000229_DwldYfmcSsiReflectDnsxmpkeywords3Omn.pdf.pdf
-
malicious/000287_DwldYfmcSsiBfRcekeywords3MHq.pdf.pdf
-
malicious/000289_DwldYfmcSsiBfRcexmpkeywords3pJG.pdf.pdf
-
malicious/000326_DwldYfmcEsiReflectkeywords0RYr.pdf.pdf
-
malicious/000327_DwldYfmcEsiReflectxmpkeywords0qYt.pdf.pdf
-
malicious/000423_DwldYfmcXxeOfficeStylesheetAll0CEA.docx.docx office2007
-
malicious/000425_DwldYfmcXxeOfficeStylesheetAll1anS.docx.docx office2007
-
malicious/000427_DwldYfmcXxeOfficeStylesheetAll2HeM.docx.docx office2007
-
malicious/000429_DwldYfmcXxeOfficeStylesheetAll3eGb.docx.docx office2007
-
malicious/000438_DwldYfmcXxeOfficeStylesheetContentTypes0Krs.docx.docx office2007
-
malicious/000440_DwldYfmcXxeOfficeStylesheetContentTypes1axH.docx.docx office2007
-
malicious/000442_DwldYfmcXxeOfficeStylesheetContentTypes2DiJ.docx.docx office2007
-
malicious/000444_DwldYfmcXxeOfficeStylesheetContentTypes3sdM.docx.docx office2007
-
malicious/000448_DwldYfmcXxeOfficeParameterEntityContentTypes0iwV.docx.docx office2007
-
malicious/000449_DwldYfmcXxeOfficeParameterEntityContentTypes1BPG.docx.docx office2007
-
malicious/000450_DwldYfmcXxeOfficeParameterEntityContentTypes2RDC.docx.docx office2007
-
malicious/000451_DwldYfmcXxeOfficeParameterEntityContentTypes3vTx.docx.docx office2007
-
malicious/000452_DwldYfmcXxeOfficeDtdContentTypes0sJN.docx.docx office2007
-
malicious/000454_DwldYfmcXxeOfficeDtdContentTypes1cWf.docx.docx office2007
-
malicious/000456_DwldYfmcXxeOfficeDtdContentTypes2Tyi.docx.docx office2007
-
malicious/000458_DwldYfmcXxeOfficeDtdContentTypes3SBU.docx.docx office2007
-
malicious/000467_DwldYfmcXxeOfficeStylesheetMain0XAW.docx.docx office2007
-
malicious/000469_DwldYfmcXxeOfficeStylesheetMain1qsK.docx.docx office2007
-
malicious/000471_DwldYfmcXxeOfficeStylesheetMain2xBf.docx.docx office2007
-
malicious/000473_DwldYfmcXxeOfficeStylesheetMain3Yqp.docx.docx office2007
-
malicious/123.asp;.pdf.pdf