Overview

overview

10

Static

static

10

NTUSER.BAT...TM.vbs

windows7-x64

6

NTUSER.BAT...TM.vbs

windows10-2004-x64

7

NTUSER.BAT...TM.bat

windows7-x64

8

NTUSER.BAT...TM.bat

windows10-2004-x64

8

NTUSER.DAT....1.ps1

windows7-x64

3

NTUSER.DAT....1.ps1

windows10-2004-x64

3

AutoHotkey.exe

windows7-x64

1

AutoHotkey.exe

windows10-2004-x64

1

NTUSER.bat...TM.bat

windows7-x64

3

NTUSER.bat...TM.bat

windows10-2004-x64

3

NTUSER.vbs...TM.vbs

windows7-x64

3

NTUSER.vbs...TM.vbs

windows10-2004-x64

3

VideoVLC_Subtitle.ps1

windows7-x64

3

VideoVLC_Subtitle.ps1

windows10-2004-x64

3

VideoVLC_s...es.exe

windows7-x64

10

VideoVLC_s...es.exe

windows10-2004-x64

10

OPS/b01.html

windows7-x64

1

OPS/b01.html

windows10-2004-x64

1

OPS/b02.html

windows7-x64

1

OPS/b02.html

windows10-2004-x64

1

OPS/b03.html

windows7-x64

1

OPS/b03.html

windows10-2004-x64

1

OPS/b04.html

windows7-x64

1

OPS/b04.html

windows10-2004-x64

1

OPS/c01.html

windows7-x64

1

OPS/c01.html

windows10-2004-x64

1

OPS/c02.html

windows7-x64

1

OPS/c02.html

windows10-2004-x64

1

OPS/c03.html

windows7-x64

1

OPS/c03.html

windows10-2004-x64

1

OPS/c04.html

windows7-x64

1

OPS/c04.html

windows10-2004-x64

1

Resubmissions

21/01/2025, 11:11

250121-narffszrcw 3

11/07/2024, 09:15

240711-k7ydgszcql 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Business Secrets from the Bible - Rabbi Daniel Lapin:Business Secrets from the Bible - Rabbi Daniel Lapin.rar

  • Size

    14.7MB

  • MD5

    9627cc4cc31f3cb951c6ceb73a081a34

  • SHA1

    fc8ea2d0aadf4a6ff2672679fa0042a010264ea9

  • SHA256

    c1e3d43e047756db85237b9c758544154708efb4e78c08a455b951b880aef9d5

  • SHA512

    00fabc91f787e80904278e7e353e20a53b89356fcfe93ad29b2bb7a77bc0be0c0ebf7966974263a3ee5c3f65a2ea08d205934de1f030b051a6de8bf536c5a8d4

  • SSDEEP

    393216:zI3RjLu5HveTLr6j4bCGVlCOEB+H3h0r48haAdQox:zIhj+G3rDRs+Hy48zdQ0

Score
10/10
qrlink(_!_d@ys_!_)asyncrat

Malware Config

Extracted

Family

asyncrat

Version

RIMAWI 1.0.2.9

Botnet

(_!_D@YS_!_)

C2

127.0.0.1:36365

Mutex

AZSXDCFVGBHNqwertyui

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Asyncrat family
    asyncrat
  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

    qrlink
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Business Secrets from the Bible - Rabbi Daniel Lapin:Business Secrets from the Bible - Rabbi Daniel Lapin.rar
    .rar
  • Business Secrets from the Bible - Rabbi Daniel Lapin/6546/4.mkv
    .rar
  • NTUSER.BAT{428f9636-1254-e23e3-ada2-03427pie23}.TM.VBS
    .vbs
  • NTUSER.BAT{428f9636-1254-ee23-ada2-080027dede23}.TM.bat
    .bat .vbs
  • NTUSER.DAT{4280000a-1254-11ef-ada2-080007dede23}.TM.blf
  • NTUSER.DAT{428f1209-1254-11ef-ada2-080027dede23}.TxR.1.ps1
    .ps1
  • NTUSER.DAT{428f1209-1254-13ef-ada4-080027dede23}.TxR.blf
  • NTUSER.DAT{428f120a-1254-eeeef-ada2-080027dede23}.TM.blf
  • NTUSER.DAT{428f4444a-13354-11ef-sdd2-080027dede23}.TM.blf
  • Business Secrets from the Bible - Rabbi Daniel Lapin/6546/5.mkv
    .rar
  • AutoHotkey.exe
    .exe windows:5 windows x86 arch:x86

    110b84147f78faa83fe4a0b58cab11bd


    Headers

    Imports

    Sections

  • NTUSER.ahk{428f9636-1254-e23e3-ada2-03427pie22}.TM.ahk
  • NTUSER.bat{428f9636-1254-e23e3-ada2-03427pie22}.TM.bat
    .bat .vbs
  • NTUSER.vbs{428f9636-1254-e23e3-ada2-03427pie22}.TM.vbs
    .vbs
  • Business Secrets from the Bible - Rabbi Daniel Lapin/6546/8.mkv
    .zip
  • VideoVLC_Subtitle.ps1
    .ps1
  • VideoVLC_subtitles.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Business Secrets from the Bible - Rabbi Daniel Lapin/6546/Business Secrets from the Bible - Rabbi Daniel Lapin.epub
    .zip
  • META-INF/container.xml
  • OPS/WileyTemplate_v5.5.css
  • OPS/b01.xhtml
    .html
  • OPS/b02.xhtml
    .html
  • OPS/b03.xhtml
    .html
  • OPS/b04.xhtml
    .html
  • OPS/c01.xhtml
    .html
  • OPS/c02.xhtml
    .html
  • OPS/c03.xhtml
    .html
  • OPS/c04.xhtml
    .html
  • OPS/c05.xhtml
    .html
  • OPS/c06.xhtml
    .html
  • OPS/c07.xhtml
    .html
  • OPS/c08.xhtml
    .html
  • OPS/c09.xhtml
    .html
  • OPS/c10.xhtml
    .html
  • OPS/c11.xhtml
    .html
  • OPS/c12.xhtml
    .html
  • OPS/c13.xhtml
    .html
  • OPS/c14.xhtml
    .html
  • OPS/c15.xhtml
    .html
  • OPS/c16.xhtml
    .html
  • OPS/c17.xhtml
    .html
  • OPS/c18.xhtml
    .html
  • OPS/c19.xhtml
    .html
  • OPS/c20.xhtml
    .html
  • OPS/c21.xhtml
    .html
  • OPS/c22.xhtml
    .html
  • OPS/c23.xhtml
    .html
  • OPS/c24.xhtml
    .html
  • OPS/c25.xhtml
    .html
  • OPS/c26.xhtml
    .html
  • OPS/c27.xhtml
    .html
  • OPS/c28.xhtml
    .html
  • OPS/c29.xhtml
    .html
  • OPS/c30.xhtml
    .html
  • OPS/c31.xhtml
    .html
  • OPS/c32.xhtml
    .html
  • OPS/c33.xhtml
    .html
  • OPS/c34.xhtml
    .html
  • OPS/c35.xhtml
    .html
  • OPS/c36.xhtml
    .html
  • OPS/c37.xhtml
    .html
  • OPS/c38.xhtml
    .html
  • OPS/c39.xhtml
    .html
  • OPS/c40.xhtml
    .html
  • OPS/content.opf
  • OPS/cover.xhtml
    .html
  • OPS/eula.xhtml
    .html
  • OPS/f01.xhtml
    .html
  • OPS/f02.xhtml
    .html
  • OPS/f03.xhtml
    .html
  • OPS/f04.xhtml
    .html
  • OPS/images/9781394215898.jpg
    .jpg
  • OPS/images/PublisherAdPages2024_Page01.png
    .png

    • https://www.wehappywarriors.com/email-list-opt-in

  • OPS/images/PublisherAdPages2024_Page02.png
    .png

    • https://www.wehappywarriors.com/offers/wqVmhjRm

  • OPS/images/PublisherAdPages2024_Page03.png
    .png

    • http://www.wehappywarriors.com/book-of-ruth-free-lesson-signup

    • https://www.wehappywarriors.com/the-gathering-storm

  • OPS/images/PublisherAdPages2024_Page04.png
    .png
  • OPS/images/PublisherAdPages2024_Page05.png
    .png
  • OPS/images/badverti001.png
    .png
  • OPS/images/badvertuf001.png
    .png
  • OPS/images/c10uf001.png
    .png
  • OPS/images/c10uf002.png
    .png
  • OPS/images/c24uf001.png
    .png
  • OPS/images/icon.png
    .png
  • OPS/images/logo.png
    .png
  • OPS/index.css
  • OPS/navigation.xhtml
    .html
  • OPS/toc.ncx
    .xml
  • mimetype
  • Business Secrets from the Bible - Rabbi Daniel Lapin/Business Secrets from the Bible - Rabbi Daniel Lapin.lnk
    .lnk
  • Business Secrets from the Bible - Rabbi Daniel Lapin/RM.TXT