Overview
overview
7Static
static
1blobs/sha2...bd.tar
windows7-x64
3blobs/sha2...bd.tar
windows10-2004-x64
3docker-ent...ult.sh
ubuntu-18.04-amd64
1docker-ent...ult.sh
debian-9-armhf
1docker-ent...ult.sh
debian-9-mips
1docker-ent...ult.sh
debian-9-mipsel
1blobs/sha2...8d.tar
windows7-x64
3blobs/sha2...8d.tar
windows10-2004-x64
3docker-ent...ses.sh
ubuntu-18.04-amd64
1docker-ent...ses.sh
debian-9-armhf
1docker-ent...ses.sh
debian-9-mips
1docker-ent...ses.sh
debian-9-mipsel
1blobs/sha2...4d.tar
windows7-x64
3blobs/sha2...4d.tar
windows10-2004-x64
3docker-ent...tes.sh
ubuntu-18.04-amd64
3docker-ent...tes.sh
debian-9-armhf
3docker-ent...tes.sh
debian-9-mips
3docker-ent...tes.sh
debian-9-mipsel
3blobs/sha2...04.tar
windows7-x64
3blobs/sha2...04.tar
windows10-2004-x64
3blobs/sha2...67.tar
windows7-x64
3blobs/sha2...67.tar
windows10-2004-x64
3Резюм...�.docx
windows7-x64
7Резюм...�.docx
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
blobs/sha256/0fc6bb94eec5602c08d4261eedf9f122af7d122983c5ad8d8cf9ab108d9fd7bd.tar
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
blobs/sha256/0fc6bb94eec5602c08d4261eedf9f122af7d122983c5ad8d8cf9ab108d9fd7bd.tar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral4
Sample
docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral5
Sample
docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral6
Sample
docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral7
Sample
blobs/sha256/11de3d47036d69ed34dcf240a2d82e0ffc8a9dc8b77deeed65fb6380fbc84c8d.tar
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
blobs/sha256/11de3d47036d69ed34dcf240a2d82e0ffc8a9dc8b77deeed65fb6380fbc84c8d.tar
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
docker-entrypoint.d/30-tune-worker-processes.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral10
Sample
docker-entrypoint.d/30-tune-worker-processes.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral11
Sample
docker-entrypoint.d/30-tune-worker-processes.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral12
Sample
docker-entrypoint.d/30-tune-worker-processes.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral13
Sample
blobs/sha256/16907864a2d01d70c5c1e740085ace628f9d85b9eb38ced8c623e2c3ae36734d.tar
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
blobs/sha256/16907864a2d01d70c5c1e740085ace628f9d85b9eb38ced8c623e2c3ae36734d.tar
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
docker-entrypoint.d/20-envsubst-on-templates.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral16
Sample
docker-entrypoint.d/20-envsubst-on-templates.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral17
Sample
docker-entrypoint.d/20-envsubst-on-templates.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral18
Sample
docker-entrypoint.d/20-envsubst-on-templates.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral19
Sample
blobs/sha256/2bdf51597158f7b0335cb1c082f8449a7ba1af678876158a05747eecca9b7604.tar
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
blobs/sha256/2bdf51597158f7b0335cb1c082f8449a7ba1af678876158a05747eecca9b7604.tar
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
blobs/sha256/eda13eb24d4c7b2c4cf60fbef992e18936613ad9067421ae1b59a413f3393267.tar
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
blobs/sha256/eda13eb24d4c7b2c4cf60fbef992e18936613ad9067421ae1b59a413f3393267.tar
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Резюме_Компота.docx
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Резюме_Компота.docx
Resource
win10v2004-20240802-en
General
-
Target
.zip
-
Size
83.7MB
-
MD5
cd76acc6af471cfef60b77ad6e872157
-
SHA1
2af31f32ee35ed1ee3e461abb9da4eefa8e22b21
-
SHA256
4beb5d27d0761a484f701de248665c7d04bac5a6b334fe6fcb7fb09e51b7bc09
-
SHA512
1ba78a8c6dfb92eb6cf00ff3f1260eabcde3fcecb55336942e398868374e7e8da3363dd221681674c103cc4a933781fec9dcd8f29904f952556e3c9f1daa21da
-
SSDEEP
1572864:eFGQ+GJyU1G8viSmXfevIgT7a17qTQGEPlhJgEnHvbUJgJQI9z0X:eFdJp3q3fs7s3GuLJHPbUyJQOW
Malware Config
Signatures
Files
-
.zip.zip
-
camp.tar.tar .vbs polyglot
-
blobs/sha256/0004bda4bcee104e620efaa6b3b33808238c5e3e7cbe3307b45cd422a89de379
-
blobs/sha256/0d8266da3e460c50628ad3e8673c42fe53183e159cb62ebc6e2de5644d08a32d.tar
-
etc/nginx/nginx.conf
-
blobs/sha256/0fc6bb94eec5602c08d4261eedf9f122af7d122983c5ad8d8cf9ab108d9fd7bd.tar .vbs polyglot
-
docker-entrypoint.d/10-listen-on-ipv6-by-default.sh.sh .vbs linux polyglot
-
blobs/sha256/11de3d47036d69ed34dcf240a2d82e0ffc8a9dc8b77deeed65fb6380fbc84c8d.tar .vbs polyglot
-
docker-entrypoint.d/30-tune-worker-processes.sh.sh .vbs linux polyglot
-
blobs/sha256/16907864a2d01d70c5c1e740085ace628f9d85b9eb38ced8c623e2c3ae36734d.tar .vbs polyglot
-
docker-entrypoint.d/20-envsubst-on-templates.sh.sh .vbs linux polyglot
-
blobs/sha256/29586f1f3c4d2f57e68912231fc4e3be6080b67435b27f90a5eb0f42e7cdb4db.tar
-
blobs/sha256/2bdf51597158f7b0335cb1c082f8449a7ba1af678876158a05747eecca9b7604.tar .vbs polyglot
-
docker-entrypoint.d/15-local-resolvers.envsh.sh .vbs linux polyglot
-
blobs/sha256/2e53d1abac35be774933b8c29227baf6e53d0cb4689a6712f6fbb45e4187e47c
-
blobs/sha256/41e6d6fccbdda60d1ab7825d5820cfce885233914c8616af117ad976440aa96c
-
blobs/sha256/459dd9ff6f7125a86753f19328ea7320ff213f77e60e90af2bb064f249a24921
-
blobs/sha256/54d51fe5041f51a851ace0ab428d593ebb2b82cd9738a386798108b1c78227ab
-
blobs/sha256/67796e30ff042303e3c8cbd8478e4f4f6377fd1754a168704f829c4e8a128f40.tar
-
etc/apt/keyrings/nginx-archive-keyring.gpg
-
etc/ca-certificates.conf
-
etc/default/nginx
-
etc/default/nginx-debug
-
etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf.xml
-
etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf.xml
-
etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf.xml
-
etc/fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf.xml
-
etc/fonts/conf.avail/20-unhint-small-dejavu-sans.conf.xml
-
etc/fonts/conf.avail/20-unhint-small-dejavu-serif.conf.xml
-
etc/fonts/conf.avail/57-dejavu-sans-mono.conf.xml
-
etc/fonts/conf.avail/57-dejavu-sans.conf.xml
-
etc/fonts/conf.avail/57-dejavu-serif.conf.xml
-
etc/fonts/conf.avail/58-dejavu-lgc-sans-mono.conf.xml
-
etc/fonts/conf.avail/58-dejavu-lgc-sans.conf.xml
-
etc/fonts/conf.avail/58-dejavu-lgc-serif.conf.xml
-
blobs/sha256/7892af826a07f9ab494a1261d3d8289158a0e0e6941739a87b51e697eaf7318c
-
blobs/sha256/821154e28d811cbb04828a681a4697c74aa4fdab187c7d57e1d8a1c4c95fcc31.tar
-
etc/cron.d/hello-cron
-
blobs/sha256/8c12510f32da9e58758c2455b3d379444aedebc420a6b6234a9a6848bfa88a2a
-
blobs/sha256/8e2ab394fabf557b00041a8f080b10b4e91c7027b7c174f095332c7ebb6501cb.tar
-
blobs/sha256/a189236bc351a5cc51e93d9f04e7f8c0a1bcfcf13167b0a874b3d5a8452827d4
-
blobs/sha256/a6da229eeaeb17cdee0e6a19f1701f3a3202a64284bc2e53b6a0332e6a18bcb6
-
blobs/sha256/b8e750f6cd2397fa4f15c98e7dc5e7c1ea2554b69ce784d095a6702ccf55fbde
-
blobs/sha256/c5743e80d1012d8e9da2d6b1adbb11995881bf37e81eee53164bb497590380e9
-
blobs/sha256/cb76f432142ab14aa234aba8d31979c011e579ebbab9dc4e0bda4220fdea7395.tar
-
blobs/sha256/d388c0d9627196108d54c9477bc3ce253533c789518a13ecb319c984f300a3ac
-
blobs/sha256/dde7abd6ede1bffd9389f0a0ec99aa1374647f824924d17735b529ffe9883f80
-
blobs/sha256/eb79b20b8f05e0b2543a3446cdf227a5e4c406c55a846a48d99d472224504dab
-
blobs/sha256/eda13eb24d4c7b2c4cf60fbef992e18936613ad9067421ae1b59a413f3393267.tar .vbs polyglot
-
index.json
-
manifest.json
-
oci-layout
-
repositories
-
Резюме_Компота.docx.docx office2007