Overview
overview
3Static
static
1Valhalla/V...l.html
windows7-x64
3Valhalla/V...l.html
windows10-2004-x64
1Valhalla/v...cle.js
windows7-x64
3Valhalla/v...cle.js
windows10-2004-x64
3Valhalla/v...CJS.js
windows7-x64
3Valhalla/v...CJS.js
windows10-2004-x64
3Valhalla/v...ory.js
windows7-x64
3Valhalla/v...ory.js
windows10-2004-x64
3Valhalla/v...ase.js
windows7-x64
3Valhalla/v...ase.js
windows10-2004-x64
3Valhalla/v...on.jar
windows7-x64
1Valhalla/v...on.jar
windows10-2004-x64
1Valhalla/v...y.html
windows7-x64
3Valhalla/v...y.html
windows10-2004-x64
3Valhalla/v...g.html
windows7-x64
3Valhalla/v...g.html
windows10-2004-x64
3Valhalla/v...e.html
windows7-x64
3Valhalla/v...e.html
windows10-2004-x64
3Valhalla/v...e.html
windows7-x64
3Valhalla/v...e.html
windows10-2004-x64
3Valhalla/v...s.html
windows7-x64
3Valhalla/v...s.html
windows10-2004-x64
3Valhalla/v...c.html
windows7-x64
3Valhalla/v...c.html
windows10-2004-x64
3Valhalla/v...l.html
windows7-x64
3Valhalla/v...l.html
windows10-2004-x64
3Valhalla/v...x.html
windows7-x64
3Valhalla/v...x.html
windows10-2004-x64
3Valhalla/v...e.html
windows7-x64
3Valhalla/v...e.html
windows10-2004-x64
3Valhalla/v...e.html
windows7-x64
3Valhalla/v...e.html
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Valhalla/Valhöll.html
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Valhalla/Valhöll.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Valhalla/vessel/display/articles/R3s1stanc3/javainfector_article.js
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Valhalla/vessel/display/articles/R3s1stanc3/javainfector_article.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Valhalla/vessel/display/articles/SPTH/MSCJS.js
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
Valhalla/vessel/display/articles/SPTH/MSCJS.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Valhalla/vessel/display/codes/R3s1stanc3/JavaInfector/CompileSourceInMemory.js
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
Valhalla/vessel/display/codes/R3s1stanc3/JavaInfector/CompileSourceInMemory.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Valhalla/vessel/display/codes/SPTH/Transcriptase.js
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Valhalla/vessel/display/codes/SPTH/Transcriptase.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection.jar
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection.jar
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/CompileSourceInMemory.html
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/CompileSourceInMemory.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/JavaSourceFromString.html
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/JavaSourceFromString.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/allclasses-frame.html
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/allclasses-frame.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/allclasses-noframe.html
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/allclasses-noframe.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/constant-values.html
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/constant-values.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/help-doc.html
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/help-doc.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/index-all.html
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/index-all.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/index.html
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/overview-tree.html
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/overview-tree.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/package-frame.html
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/package-frame.html
Resource
win10v2004-20240802-en
General
-
Target
valhalla3.zip
-
Size
1.2MB
-
MD5
2d816bdfe8a7eb7425d0ac2f9e27afbd
-
SHA1
2b80ea4d4110919b37da5674ef81475309a5dcf1
-
SHA256
4a465cf6d0a6d93e093a3b0713356bb9256edaa007612da46f19480b5eecedf8
-
SHA512
a95a52abb94668737343ab77d07dc0b4c44d2d71311e6aa8099f42d3d4b026a5e3b9237ce0e828cb4360a3003457329ff71dea13d8c5f0b1bbe497ecfec34535
-
SSDEEP
24576:mgVjDGCtY4Vj0+8a7dDUCAUUUaE3PO1m19s9nlb7SvIrYYTZGPhuG8LH+32LGCSK:VhYwZyCRtElb2WJTYPh18a3iG4/
Malware Config
Signatures
Files
-
valhalla3.zip.zip
-
Valhalla/Valhöll.html.html
-
Valhalla/vessel/display/articles/(o)/wave.txt
-
Valhalla/vessel/display/articles/R3s1stanc3/javainfector_article.txt.js
-
Valhalla/vessel/display/articles/SPTH/MSCJS.txt.js
-
Valhalla/vessel/display/articles/SPTH/m.txt
-
Valhalla/vessel/display/articles/hh86/CFFE.TXT
-
Valhalla/vessel/display/articles/hh86/DDDMM.TXT
-
Valhalla/vessel/display/articles/hh86/INLINE.TXT
-
Valhalla/vessel/display/articles/roy g biv/OPENGL.TXT
-
Valhalla/vessel/display/articles/roy g biv/VCODE2.TXT
-
Valhalla/vessel/display/codes/(o)/wave_src/wave.txt
-
Valhalla/vessel/display/codes/R3s1stanc3/JavaInfector/CompileSourceInMemory.txt.js
-
Valhalla/vessel/display/codes/SPTH/Transcriptase.txt.js
-
Valhalla/vessel/display/codes/hh86/ATLAS/ATLAS.TXT
-
Valhalla/vessel/display/codes/hh86/CFFE/CFFE.TXT
-
Valhalla/vessel/display/codes/hh86/SIGRÚN.C/SIGRUN.TXT
-
Valhalla/vessel/display/codes/hh86/UNIT00/UNIT00.TXT
-
Valhalla/vessel/display/codes/roy g biv/OGLE/OGLE.TXT
-
Valhalla/vessel/display/codes/roy g biv/RELOCK/RELOCK.TXT
-
Valhalla/vessel/display/editorial/BTTF.TXT
-
Valhalla/vessel/display/editorial/Contact.txt
-
Valhalla/vessel/display/editorial/Into Valhalla.txt
-
Valhalla/vessel/display/editorial/Overview.txt
-
Valhalla/vessel/display/editorial/Words from (o).txt
-
Valhalla/vessel/display/editorial/Words from R3s1stanc3.txt
-
Valhalla/vessel/display/editorial/Words from SPTH.txt
-
Valhalla/vessel/display/editorial/Words from herm1t.txt
-
Valhalla/vessel/display/editorial/Words from hh86.txt
-
Valhalla/vessel/display/interviews/INTEF.TXT
-
Valhalla/vessel/display/interviews/INTMS.TXT
-
Valhalla/vessel/display/interviews/INTVB.TXT
-
Valhalla/vessel/html/CSS/style.css
-
Valhalla/vessel/html/images/main/bgmain.png.png
-
Valhalla/vessel/raw/(o)/wave_src/wave.asm
-
Valhalla/vessel/raw/(o)/wave_src/wave.inc
-
Valhalla/vessel/raw/(o)/wave_src/wave.txt
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection.jar.jar
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/CompileSourceInMemory$1.class
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/CompileSourceInMemory.class
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/CompileSourceInMemory.ctxt
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/CompileSourceInMemory.java.java .js
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/JavaSourceFromString.class
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/README.TXT
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/CompileSourceInMemory.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/JavaSourceFromString.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/allclasses-frame.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/allclasses-noframe.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/constant-values.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/help-doc.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/index-all.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/index.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/logfile.txt
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/overview-tree.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/package-frame.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/package-list
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/package-summary.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/package-tree.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/resources/inherit.gif.gif
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/doc/stylesheet.css
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/kjlfaojdfaljgsdfaKdlkAUSfdld
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/Infection/package.bluej
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/CompileSourceInMemory.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/JavaSourceFromString.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/allclasses-frame.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/allclasses-noframe.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/constant-values.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/help-doc.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/index-all.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/index.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/logfile.txt
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/overview-tree.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/package-frame.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/package-list
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/package-summary.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/package-tree.html.html
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/resources/inherit.gif.gif
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/doc/stylesheet.css
-
Valhalla/vessel/raw/R3s1stanc3/JavaInfector/javainfector_article.txt.js
-
Valhalla/vessel/raw/SPTH/BTTF.TXT
-
Valhalla/vessel/raw/SPTH/Transcriptase/MSCJS.txt.js
-
Valhalla/vessel/raw/SPTH/Transcriptase/Transcriptase.js.js
-
Valhalla/vessel/raw/SPTH/Transcriptase/victims/victim1.js.js
-
Valhalla/vessel/raw/SPTH/Transcriptase/victims/victim2.js.js
-
Valhalla/vessel/raw/SPTH/Transcriptase/victims/victim3.js.js
-
Valhalla/vessel/raw/SPTH/m.txt
-
Valhalla/vessel/raw/hh86/ATLAS/ATLAS.ASM
-
Valhalla/vessel/raw/hh86/ATLAS/ATLAS.INC
-
Valhalla/vessel/raw/hh86/ATLAS/DDDMM.TXT
-
Valhalla/vessel/raw/hh86/CFFE/CFFE.ASM
-
Valhalla/vessel/raw/hh86/CFFE/CFFE.INC
-
Valhalla/vessel/raw/hh86/CFFE/CFFE.TXT
-
Valhalla/vessel/raw/hh86/SIGRÚN.C/SIGRUN.ASM
-
Valhalla/vessel/raw/hh86/SIGRÚN.C/SIGRUN.INC
-
Valhalla/vessel/raw/hh86/UNIT00/INLINE.TXT
-
Valhalla/vessel/raw/hh86/UNIT00/UNIT00.ASM
-
Valhalla/vessel/raw/hh86/UNIT00/UNIT00.INC
-
Valhalla/vessel/raw/roy g biv/OGLE/29A.NFO
-
Valhalla/vessel/raw/roy g biv/OGLE/DEFJAM.NFO
-
Valhalla/vessel/raw/roy g biv/OGLE/OGLE.ASM
-
Valhalla/vessel/raw/roy g biv/OGLE/OGLE.INC
-
Valhalla/vessel/raw/roy g biv/OGLE/OPENGL.TXT
-
Valhalla/vessel/raw/roy g biv/RELOCK/29A.NFO
-
Valhalla/vessel/raw/roy g biv/RELOCK/DEFJAM.NFO
-
Valhalla/vessel/raw/roy g biv/RELOCK/RELOCK.ASM
-
Valhalla/vessel/raw/roy g biv/RELOCK/RELOCK.INC
-
Valhalla/vessel/raw/roy g biv/RELOCK/VCODE2.TXT