Overview
overview
10Static
static
10Kalkulator...g.html
windows7-x64
3Kalkulator...g.html
windows10-2004-x64
3Kalkulator...ni.doc
windows7-x64
4Kalkulator...ni.doc
windows10-2004-x64
1Kalkulator...n.html
windows7-x64
3Kalkulator...n.html
windows10-2004-x64
1Kalkulator...1.html
windows7-x64
3Kalkulator...1.html
windows10-2004-x64
3Kalkulator...2.html
windows7-x64
3Kalkulator...2.html
windows10-2004-x64
4Kalkulator...or.exe
windows7-x64
10Kalkulator...or.exe
windows10-2004-x64
10Kalkulator...or.url
windows7-x64
6Kalkulator...or.url
windows10-2004-x64
3Kalkulator...ja.exe
windows7-x64
10Kalkulator...ja.exe
windows10-2004-x64
10Kalkulator...00.exe
windows7-x64
7Kalkulator...00.exe
windows10-2004-x64
7General
-
Target
Kalkulator.rar
-
Size
1.7MB
-
Sample
240902-tgfkesvcne
-
MD5
897b1a4c622e9fdf236e2d295113f963
-
SHA1
e2006b76e2bd4d6ef58e719f546c8372e6f4efa1
-
SHA256
92e1564bda93d78c41c2c2898bfb3995fd9c2bd58753664231f71475baf69bd3
-
SHA512
ccc8faf4efe65db9ebf0707c0d0f63e5f2a7217beed1e1abc83d28fdab6f212da7e9c77c1a8fb0deb8344c261396867a09abf9ce9a15f4f42a6c117cdb1b3ba3
-
SSDEEP
49152:s/LDwVirFVmPhQWD4aju1RPAQ6bv+hWrOM/tgtcv:U5rFQhQWMaaRPALLJdytQ
Behavioral task
behavioral1
Sample
Kalkulator/B-517/Loading.html
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Kalkulator/B-517/Loading.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Kalkulator/B-517/obciążenia ładowni.doc
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Kalkulator/B-517/obciążenia ładowni.doc
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Kalkulator/B-517/plan.html
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Kalkulator/B-517/plan.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Kalkulator/B-517/pr1.html
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Kalkulator/B-517/pr1.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Kalkulator/B-517/pr2.html
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
Kalkulator/B-517/pr2.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Kalkulator/Kalkulator.exe
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Kalkulator/Kalkulator.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Kalkulator/Kalkulator.url
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Kalkulator/Kalkulator.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Kalkulator/Sekwencja.exe
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
Kalkulator/Sekwencja.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Kalkulator/unins000.exe
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Kalkulator/unins000.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
Kalkulator/B-517/Loading.html
-
Size
776B
-
MD5
3f86a7fd1be42f7dbf34c4ff25533cc5
-
SHA1
9b9477d475bad3b7dbbcb455fa0ba096bd9179ed
-
SHA256
bcb19bc09ed1f5567ee5c07d8421d3463536c10e3e796d73b6aeac81d5e760cd
-
SHA512
0b354cef65df83224995f39f24b2663534eec86ff67c0ac0a66e77db84f1d3e33d44d80f5a5f9d3f611bd726b3bf7fda5cd5818c100cbc2fd531e34c4e4327ac
Score3/10 -
-
-
Target
Kalkulator/B-517/obciążenia ładowni.doc
-
Size
27KB
-
MD5
0a4f46f45d61c857f5be7bc29980dec6
-
SHA1
0ddc262c25637c8847f38d3c554f1055bb14e2ed
-
SHA256
b8a2f4caa0a82b11b8dfa190ec7b20d7ed5686ceaa2ae8a43ed0b2850b80965a
-
SHA512
1562465758853d3b48330ff84bb7056c1fb91d00a0f0d3724fa7c6d779c32ec8e2d4d87a3096332f5039e1706b53910e1e9c683f6dd81c36f39a591cf14f6e4a
-
SSDEEP
96:Uy8ZVDGD1kks5tkP5Okb5Akmw5/kR5bkF5kkUkxL/3G3T3T3T3T3T3T3FNWgYEP6:uZVDo+MDhgwKDq+Z0dV
Score4/10 -
-
-
Target
Kalkulator/B-517/plan.html
-
Size
37B
-
MD5
d567db97e06e09fc4e3e05aead69a380
-
SHA1
965453a888ad8f84c33b54060283ad8976b698e3
-
SHA256
feb79d914df67c416f25cfc83d75267b15ce6c2317ed86f6fcd9467f73ce9fe9
-
SHA512
d2b34cb1a21fd1caea8e21aa42ea7e6b071a3376ea8a0872ff5225ea024a5959078bd7ed88aeaef9c40cb4c2a8778fa1a488db4c78800ae3529471b578b1f72c
Score3/10 -
-
-
Target
Kalkulator/B-517/pr1.html
-
Size
97B
-
MD5
946dbfb7da138cde07c227a650dfcbf5
-
SHA1
93d662dca61af230c67ac3acc86e871a7287d50b
-
SHA256
aa1c855cf0d8335c482d520b81d7eb9b0307fab316d896b4fcdfa74a4012d892
-
SHA512
cb5c0085f1cc3b8a7a2f029e4b84c176ea519a3b3322a0265fb75c0f4af89efdcdfa057e9ee80e3030900665782024f3535b53c061d3bf896a419d443cfb1444
Score3/10 -
-
-
Target
Kalkulator/B-517/pr2.html
-
Size
97B
-
MD5
e01708576230dd7d3a86dbf5aaf09b68
-
SHA1
c02ac3940c6705fa086d09b56967c144ba290a5e
-
SHA256
5bd80d73adcd9d7b77c17c799705a1b8189d6870117d8e7ba915a5f000144508
-
SHA512
354ac3fa87a90f710334e783a0bc9b76e37458a1513d516c75fdd7b15e9df383bfedb8a1abd2c81f8d1a8c363d03b1b4129e86c94b07233025c66b814eb61e6c
Score4/10 -
-
-
Target
Kalkulator/Kalkulator.exe
-
Size
1.7MB
-
MD5
4f6efe3f4b09238d5b3de2115cb968c1
-
SHA1
c15a673c74d5175fbd251b8bb823c45618ef0dee
-
SHA256
e170860480858a64673e59bb3b15bd58c10701ea2ef7a959c9d2ccff6662ba5d
-
SHA512
39a9693ff5587b795b0f161287a9bb63adfde16f33a9ae427cb34a1edfd186c3aa6f94e050227b5aa6d605af6f8326037cb040f563f584b558b3af5d2c09b45e
-
SSDEEP
24576:gqpiRLIdnv9GwMLJCLc6DRhL7YSMv8H5x+KWYxJRSJfUBVKGXKGaL1:gki8nv9GwMtCV5d1VKGXKV1
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage
-
-
-
Target
Kalkulator/Kalkulator.url
-
Size
59B
-
MD5
7083e59aed51160103cb0841b9d5b45b
-
SHA1
1c5d6903574fa2120f3e67a58c1ff23e9279cf5f
-
SHA256
72ee6ca795f9df48342a3c14b6146708860a41de5818be0ecf1a65e18091c158
-
SHA512
79538e01f5f3e98cb73d8c26e15e84639d89977cf6dbc3e4454fdde608ae06a26ef1c803b2512f690b9e79f29fd8740d6f8951155a01d9bc1688b50dc54fee76
-
-
-
Target
Kalkulator/Sekwencja.exe
-
Size
730KB
-
MD5
3305bab423a52c14c0be6dfcace52cc2
-
SHA1
224c13808c15740c31a5874dfce8680891a1257a
-
SHA256
7898ff024d4d125c13d3e9e220a52fcac0e531644c418ea99f4e694a3c0c2349
-
SHA512
2a5a2feddccb4b36cf99e464a0b12fa25d5114c34fe62cf1d379fd804c449785dad9889da52e7dc18d99bda24d95f4625ebefc57aa598d5c5c4aff9bb4c4c641
-
SSDEEP
12288:6JVaLs6VzlPbZWUjRErd3e/l7vlvXSDiOp:UV0bVzvRErte97vJSJ
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader First Stage
-
-
-
Target
Kalkulator/unins000.exe
-
Size
627KB
-
MD5
93ca48d15c99dfcdebdc09b0238275e2
-
SHA1
42e435fbf113fc1a4bb4667a682ea070a69f0928
-
SHA256
882f15b083c10518e5fc89ca5c1b88fda47cd3cd403c3a637a2c2f02d1850eb6
-
SHA512
2a78561e13dd0f0ac7a650b7803c2fc39bc4043b9be9e2ef6ed477b674fae8448430f033d0c9061ad0241ecaf55a5a972cfe17e6461c0182cd61963bc620fe4d
-
SSDEEP
12288:6tOokrvhfrPY37nzHNA6iA1D2ftCy7ONbzw32AreMAZZ9xpm:Bo0vhfrPY37nzHNA6iA+74seMAZvxpm
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-