Behavioral task
behavioral1
Sample
DW157-1-Fl4reOn2023.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
DW157-1-Fl4reOn2023.pdf
Resource
win10v2004-20240709-en
General
-
Target
DW157-1-Fl4reOn2023.pdf
-
Size
8.7MB
-
MD5
5471c580c47d9289b1f5afa8f504efd9
-
SHA1
d12950c709a42c91a5787c1f08cf3cb642fdf1b8
-
SHA256
2a151b621206a5ed06c49b1c3dcdd582f43396448f6f98184bcf1dc55a4a1e05
-
SHA512
8d38d37da30757db7368510ef15cdc0728507c149baf7808b893aee4c6c2f03524cf65cd6b69cf0b5ec6c9bda595ad8ee6eebcf51da2279ae4ba73478526667b
-
SSDEEP
196608:jJxMPHrek64xAvnt4UbKHlHxsVWOPbMo1bwLiGDmZ2rzM:zWek6FLcvOzlb8D0kzM
Malware Config
Signatures
Files
-
DW157-1-Fl4reOn2023.pdf.pdf
-
http://127.0.0.1
-
http://127.0.0.1:57328/2/summary
-
http://2023www.DigitalWhisper.co.il
-
http://AES.new
-
http://ARC4.new
-
http://R.raw.ps
-
http://README.md
-
http://Requestbighackies.flare-on.com/stolenhe-IL
-
http://_ARC4.py
-
http://create_functions_mapping.py
-
http://flare-on.com
-
http://flare-on.com/files/Flare-On10_Challenges.zip
-
http://he-ILFORTHhe-ILhe-ILhe-ILREADME.md
-
http://he-ILREADME.md
-
http://he-ILflake_inject.pyflake.exeflake_inject.py
-
http://he-ILhe-IL.pydflake.exe_tkinter.py
-
http://idapython_basic.py
-
http://key.to
-
http://lars.nocrew.org/forth2012/alpha.html
-
http://lars.nocrew.org/forth2012/core/BL.html
-
http://lars.nocrew.org/forth2012/core/PARSE.html
-
http://on.com/evilc2server/report_token/report_token.php?token=
-
http://sauerbraten.org/
-
http://some_module.py
-
http://www.DigitalWhisper.co.il
-
https://anti-debug.checkpoint.com/techniques/debug-flags.html#using-win32-api-ntqueryinformationprocess-processdebugobjecthandle
-
https://blog.nviso.eu/2021/09/02/anatomy-and-disruption-of-metasploit-shellcode/#Import-Resolution-Analysis
-
https://crackstation.net/
-
https://discord.com/
-
https://docs.python.org/3/library/pdb.html
-
https://dos.fandom.com/wiki/BLASTER_Variable
-
https://en.wikipedia.org/wiki/Advanced_Debugger
-
https://en.wikipedia.org/wiki/DLL_injection
-
https://en.wikipedia.org/wiki/DOS
-
https://en.wikipedia.org/wiki/Forth_(programming_language)
-
https://en.wikipedia.org/wiki/Linear_congruential_generator
-
https://en.wikipedia.org/wiki/Master_boot_record
-
https://en.wikipedia.org/wiki/PDP-11_architecture
-
https://en.wikipedia.org/wiki/RSA_(cryptosystem)
-
https://en.wikipedia.org/wiki/Return-oriented_programming
-
https://en.wikipedia.org/wiki/Salsa20
-
https://en.wikipedia.org/wiki/Simon_(game)
-
https://en.wikipedia.org/wiki/Stack-oriented_programming
-
https://flare-on.com/evilc2server
-
https://flare-on.com/evilc2server/report_token/report_token.php?token=
-
https://flare-on.com/evilc2server/report_token/report_token.php?tokenhe-ILhe-ILhe-IL
-
https://flare-on.com/evilc2serveralgAES/CBC/PKCS5Paddinghe-ILhe-ILMessageWorkeronNewTokenURLc2PostByWebPostByWebhe-ILevilc2serverhe-ILhe-ILMessageWorkerf356baac.f362ahe-ILimporthe-ILhe-ILMessageWorkerpackagefhe-ILhe-ILfbhe-ILhe-ILhe-ILhe-IL
-
https://gist.github.com/Velaxtor/4695312
-
https://github.com/Dump-GUY/Malware-analysis-and-Reverse-engineering/blob/main/Debugging%20MBR%20-%20IDA%20+%20Bochs%20Emulator/Debugging%20MBR%20-%20IDA%20+%20Bochs%20Emulator.md
-
https://github.com/Nuitka/Nuitka
-
https://github.com/call-042PE/PyInjector
-
https://github.com/elikaski/Flare-On10
-
https://github.com/maximmasiutin/rsa-coppersmith-stereotyped-message
-
https://github.com/open-simh/simh
-
https://github.com/open-simh/simh/actions/runs/6432787282
-
https://github.com/openssl/openssl/tree/master
-
https://github.com/skylot/jadx
-
https://learn.microsoft.com/en-us/cpp/mfc/mfc-desktop-applications?view=msvc-170
-
https://learn.microsoft.com/en-us/windows/win32/api/winternl/ns-winternl-peb
-
https://nmap.org/ncat/
-
https://reverseengineering.stackexchange.com/questions/13627/ida-python-list-all-imported-functions
-
https://sourceforge.net/projects/bochs/files/bochs/2.6.11/Bochs-win64-2.6.11.exe/download
-
https://sparrowwallet.net/
-
https://sparrowwallet.net/docs/quick-start.html
-
https://stanislavs.org/helppc/scan_codes.html
-
https://store.steampowered.com/
-
https://www.dosbox.com/
-
https://www.intel.com/content/www/us/en/developer/articles/technical/intel-sdm.html
-
https://www.linkedin.com/in/elikaski/
-
https://www.unix.com/man-page/v7/1/adb/
-
https://www.youtube.com/watch?v=a3Z7zEc7AXQ
-
https://www.youtube.com/watch?v=dQw4w9WgXcQ
-
https://youtu.be/H-uFzBDQQjw?t=162
- Show all
-