General
-
Target
samples_pcap.zip
-
Size
20.5MB
-
Sample
240713-xg3xhavfjb
-
MD5
a37a8feea4cf91fe2223efd28a48e1aa
-
SHA1
87b970c0012f7dfb630819ba3302dc87db360ffd
-
SHA256
273ffc020f3bae8049be32d6b73371f35147f84ef19dfdad91217cdca3632d23
-
SHA512
b402fee4ba98899312351bd4e6e2d1b6fccf5670f1ac702c5c707fa04e8c6734fda7f0ced26285557584cf2b0863b14746baa747738a5d7db042f64999571532
-
SSDEEP
393216:kWsa0cDnk94tFL8zQSAJFn6vKDpPIbxnWqYNIuXPjr33vTvyApcn:kWswWus26SDpPI9Ujrr33v+H
Behavioral task
behavioral1
Sample
samples_pcap.zip
Resource
win10v2004-20240709-de
Behavioral task
behavioral2
Sample
25af3ae9f4ebe5413b0ca1080b69b0ca.exe
Resource
win10v2004-20240709-de
Behavioral task
behavioral3
Sample
payload.pyc
Resource
win10v2004-20240709-de
Behavioral task
behavioral4
Sample
25af3ae9f4ebe5413b0ca1080b69b0ca.pcap
Resource
win10v2004-20240709-de
Behavioral task
behavioral5
Sample
decryptor.exe
Resource
win10v2004-20240709-de
Behavioral task
behavioral6
Sample
decryptor.pyc
Resource
win10v2004-20240709-de
Malware Config
Extracted
C:\Users\Admin\Pictures\README.txt
1sd2WD1fEJnUPkGgfTEciWENKtLeUGMQe
Extracted
C:\Users\Admin\Downloads\UUd9PgZ3.pyc.part
1sd2WD1fEJnUPkGgfTEciWENKtLeUGMQe
Targets
-
-
Target
samples_pcap.zip
-
Size
20.5MB
-
MD5
a37a8feea4cf91fe2223efd28a48e1aa
-
SHA1
87b970c0012f7dfb630819ba3302dc87db360ffd
-
SHA256
273ffc020f3bae8049be32d6b73371f35147f84ef19dfdad91217cdca3632d23
-
SHA512
b402fee4ba98899312351bd4e6e2d1b6fccf5670f1ac702c5c707fa04e8c6734fda7f0ced26285557584cf2b0863b14746baa747738a5d7db042f64999571532
-
SSDEEP
393216:kWsa0cDnk94tFL8zQSAJFn6vKDpPIbxnWqYNIuXPjr33vTvyApcn:kWswWus26SDpPI9Ujrr33v+H
Score1/10 -
-
-
Target
25af3ae9f4ebe5413b0ca1080b69b0ca.bin
-
Size
11.3MB
-
MD5
25af3ae9f4ebe5413b0ca1080b69b0ca
-
SHA1
c34e2a2d8ba0aaea3913227de0cbf87cad4ebd1b
-
SHA256
2d95507aa1ea5d2a6313bc5c201cf76e6aae4c207aa0fafe8f1fcb03e94102ec
-
SHA512
b7194be16c8d4db0fc8305165c6d0e0aa6684b36c58855d9fab11e0d59d8bf004475df9932588cabebeff7d4f9a71dfa6bd8e985cfde1e318eb34e6880960ff2
-
SSDEEP
196608:ZDgEmz555jYu/mmWeeOuWJysVYvsOFDeECRl2Ewf8jI48RmU/3ZlsPv+dvSh8CDw:Pmz51TWeeDWJVHykUtN3ZWMp
Score10/10-
Loads dropped DLL
-
-
-
Target
payload.pyc
-
Size
15KB
-
MD5
4b76ff757725df04c8826dea29042aad
-
SHA1
977f51c0937b0143ce1ba7bdc7e6b76bf6496272
-
SHA256
a49c0e751f17791a2c908adc613ecf18b6ec1d9e3e4c289cc9ef7e02f9a46235
-
SHA512
1f8555ab06625b5be4c976c0d80d9fd01536001e7aebf58713ed1d06e0e3254c38060c31b6ae05e3725332d688becc0b4de4d75fd53bce356eee669b2eff659d
-
SSDEEP
384:NJjEY267618D5kbOSCH3r7X5sVIMz6NB+3K2JMzJUom:DjE/318lKEkIKuBSKJ3m
Score10/10 -
-
-
Target
25af3ae9f4ebe5413b0ca1080b69b0ca.pcap
-
Size
43KB
-
MD5
ed2d60fd26b288dce7252aed44d9c6a4
-
SHA1
26c3ee08fc7adc95072a82942d915f359809f294
-
SHA256
81f7ecbf724f7d43bd6e067c8a072032baf7260ef368bc417036c4f0c0a5c20a
-
SHA512
84bde1d9fdb2fcd21f465cd4e542336ef92a9cd3a46093d6679d90e087dbc0dd2b50bd9b67c9c0fb00c1d1019772654a62a7d38b0e6cd96915234d827d0a54fa
-
SSDEEP
768:nfOFfO1fOgfOtwVv+Oh+OJ+Oc+OtpfHpAaVqo:+JV9
Score3/10 -
-
-
Target
decryptor.exe
-
Size
9.6MB
-
MD5
4de3f7ed12fda2142563c791fe609867
-
SHA1
bce2ddb9861406067270a6e3bd19c42f50babc0d
-
SHA256
3f03e20b29331ecd88d69309adb9897ce749265441f13e049c458894fbc189ca
-
SHA512
13c8c101655f1169ac9a66ce62aae426b73d33c1a43923a2bd9847493b7b068f630e9cb9e1593cb23fd0120dc4a84f4809ba37a110da49187b0d1a2bf0ca48f8
-
SSDEEP
196608:ZegEmz+mWeeNuWJysVYvsO2DeECRl2Ewf8jI48RmU/3ZlsPv+djd8CaL3:QmXWeeEWJ4HykUtN3ZWMs3
Score7/10-
Loads dropped DLL
-
-
-
Target
decryptor.pyc
-
Size
2KB
-
MD5
e5b272599b97fe1f32d5ed243a13ba6e
-
SHA1
51403d58e96b634724631f3183479d338688f581
-
SHA256
b83466894cf5ffe305242128aa3165fe9475f3513a79a13786acaf99be9f41e7
-
SHA512
99605b4dc68e885e88831d6bac43ec92e122d71a930496beea90c41fdd96eda54a681043b4a0a9c434693aa1d86f3c8b0cfdeaa79c0868df39ae550026e8b792
Score3/10 -