Behavioral task
behavioral1
Sample
152e9dea419cfef125729d2fef0d8b9bc101a3694dcfff399723b64fec40383f.dll
Resource
win10v2004-20240611-en
General
-
Target
152e9dea419cfef125729d2fef0d8b9bc101a3694dcfff399723b64fec40383f.dll
-
Size
47.1MB
-
MD5
2bb66a61ff28e36b4c1279df4b99a30a
-
SHA1
ac8b92cd93f05299d3f02ae315a583727449273f
-
SHA256
152e9dea419cfef125729d2fef0d8b9bc101a3694dcfff399723b64fec40383f
-
SHA512
d05299a84a67c4ee429bac0cf7120a427fa2bf7b5ad7978e4c83537b3a596702f9f41803b2850688ea8cb8f9cbb57763a0fda91218a9598ee1f25e8967a355a7
-
SSDEEP
393216:4S16MST1mNXXBbBkHQAgLm3eYXcR4Gx8j7p17dSfqAUiNavFFLCrfsonAc+:4SgKHBb7yBcipAUP9MdAc
Malware Config
Signatures
-
resource yara_rule sample m00nd3v_logger -
M00nd3v_logger family
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule sample pdf_with_link_action -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 152e9dea419cfef125729d2fef0d8b9bc101a3694dcfff399723b64fec40383f.dll
Files
-
152e9dea419cfef125729d2fef0d8b9bc101a3694dcfff399723b64fec40383f.dll.dll windows:10 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 47.1MB - Virtual size: 47.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ