Resubmissions

06-01-2025 08:53

250106-ktfaravkfl 5

06-01-2025 08:49

250106-kreansskgv 10

General

  • Target

    #Pa$$w0rD__6654--0peɴ_Set-Up#$.zip

  • Size

    7.5MB

  • MD5

    b82b154592009655f2431f3c3e8537c2

  • SHA1

    14a1e65bb14a1c3374b092403fae84514440465c

  • SHA256

    bc845ab964ef0e15f09dc27adc16edb3381e9aac924d5787ef0046dbe62347d0

  • SHA512

    c6cd3afe1cb5888a96ba0dad7e12f359a8cfeb54a36edbfe3b46784174786a1f9db0cb6c6a219839c011779e619609a766bd5ee1de45ec716299dfeffbec873a

  • SSDEEP

    196608:jzsg208CQPnTFcwHHXWAF2zVmSEno4zx8:Mb0srHHXWAUs1e

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • One or more email addresses in PDF identified

    Detects presence of email addresses in PDF files.

Files

  • #Pa$$w0rD__6654--0peɴ_Set-Up#$.zip
    .zip

    Password: 6654

  • #Pa$$w0rD__6654--0peɴ_Set-Up#$.7z
    .7z
  • Resources/Data/Config/DisplayLanguageNames.de_CH.txt
  • Resources/Data/Config/DisplayLanguageNames.el_GR_PREEURO.txt
  • Resources/Data/Config/code6.txt
  • Resources/Data/Config/custom-hg-hello.txt
  • Resources/Data/Config/example.com_noroot_v1.0.1.txt
  • Resources/Data/Config/github.com_dmitshur-test_modtest5_v0.5.0-alpha.txt
  • Resources/Data/Config/mod_convert_glide.txt
  • Resources/Data/Config/mod_run_issue52331.txt
  • Resources/Data/Config/msg_30.txt
    .eml

    Password: 6654

  • attachment-1
  • Resources/Data/Config/test_vendor.txt
    .js
  • Resources/Data/Config/todo.txt
  • Resources/Data/Config/work_use_issue55952.txt
  • Resources/Data/DOMCharacterData_data_error_002.phpt
    .js
  • Resources/Data/Microsoft.Azure.ActiveDirectory.GraphClient.dll
    .dll windows:4 windows x86 arch:x86

    Password: 6654

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resources/Data/add_007.phpt
    .js
  • Resources/Data/array_multisort_basic2.phpt
  • Resources/Data/bug47254.phpt
  • Resources/Data/bug75420.7.phpt
  • Resources/Data/bug76601-reload-child-signals.phpt
  • Resources/Data/const.h
  • Resources/Data/cpu_usage.png
    .png

    Password: 6654

  • Resources/Data/create_new_phar_b.phpt
  • Resources/Data/dom_test.inc
    .ps1
  • Resources/Data/ftp_mlsd_missing_directory.phpt
  • Resources/Data/htwj
  • Resources/Data/info/Comparisons.pdf
    .pdf

    Password: 6654

    • http://R-project.org

    • http://libRblas.so

    • http://liblapack.so

    • http://lm.fit

    • mailto:[email protected]

  • Resources/Data/info/DIC Swatch ReadMe.pdf
    .pdf

    Password: 6654

    • http://www.dic.co.jp

    • http://www.dic.co.jp/

  • Resources/Data/info/Design-issues.pdf
    .pdf

    Password: 6654

    • http://1.as

    • http://2.as

    • http://3.as

    • http://4.as

    • http://5.as

    • http://6.as

    • http://and.tr

    • http://i.e.theupperorlowertriangleofm1containsonlyzeros.2.as

    • http://libRblas.so

    • Show all
  • Resources/Data/info/How-To CFF Extension.pdf
    .pdf

    Password: 6654

    • http://rcCheckButton.top

    • http://www.codeproject.com/

  • Resources/Data/info/Introduction.pdf
    .pdf
  • Resources/Data/info/NEWS.pdf
    .pdf
  • Resources/Data/info/approximate.pdf
    .pdf
  • Resources/Data/info/compete.pdf
    .pdf
  • Resources/Data/info/concordance.pdf
    .pdf
  • Resources/Data/info/population.pdf
    .pdf
  • Resources/Data/info/tiedtimes.pdf
    .pdf
  • Resources/Data/info/timedep.pdf
    .pdf
  • Resources/Data/info/viewports.pdf
    .pdf
  • Resources/Data/maddisAsm_.bpl
    .dll windows:5 windows x86 arch:x86

    22531f752b354d949452fbdf15d6da72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/Data/madexcept_.bpl
    .dll windows:5 windows x86 arch:x86

    2a873ab64f922b5d3d6841d9d0c267c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/Data/magic_methods_014.phpt
  • Resources/Data/msenvico.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • Resources/Data/php_libmagic.h
  • Resources/Data/readonly_class_missing_type1.phpt
  • Resources/Data/rncr
  • Resources/Data/serialization_objects_009.phpt
    .js
  • Resources/Data/session_set_save_handler_variation4.phpt
  • Resources/Data/skipLazyInitialization_default.phpt
    .js
  • Resources/Data/x64/ExporterHost.dll
    .dll windows:5 windows x64 arch:x64

    94643dc82cbe43c11dbcb075c29b0942


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/Data/x64/KeccakSponge.h
  • Resources/Data/x64/Microsoft.VisualStudio.Search.Implementation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resources/Data/x64/Microsoft.VisualStudio.VisualC.Utilities.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resources/Data/x64/SplFileObject_fgetcsv_escape_error.phpt
    .js
  • Resources/Data/x64/array_access_006.phpt
  • Resources/Data/x64/bug25922.phpt
  • Resources/Data/x64/bug65510.phpt
  • Resources/Data/x64/bug74269.phpt
  • Resources/Data/x64/missingrepo.txt
  • Resources/Data/x64/pcjr.testfile
  • Resources/Data/x64/pdo_mysql_stmt_closecursor_empty.phpt
    .js
  • Resources/Data/x64/phar_oo_006.phpt
    .js
  • Resources/Data/x64/posix_getsid_basic.phpt
  • Resources/Data/x64/r4_groupH_simple_rpcenc_017w.phpt
  • Resources/Data/x64/schema041.phpt
  • Resources/Data/x64/ssa_bug_008.phpt
  • Resources/Data/x64/template_cloning.phpt
  • Resources/Data/x64/try_multicatch_007.phpt
    .js
  • Resources/Data/x64/x86/T33.phpt
  • Resources/Data/x64/x86/bug64007.phpt
    .js
  • Resources/Data/x64/x86/bug72094.phpt
  • Resources/Data/x64/x86/foreachLoop.001.phpt
    .ps1
  • Resources/Data/x64/x86/fpm_scoreboard.h
  • Resources/Data/x64/x86/frontcontroller16.phpt
  • Resources/Data/x64/x86/gh12908.phpt
  • Resources/Data/x64/x86/gh13991.phpt
  • Resources/Data/x64/x86/htwj
  • Resources/Data/x64/x86/indirectFcall.phpt
    .js
  • Resources/Data/x64/x86/make_s390x_sysv_elf_gas.S
  • Resources/Data/x64/x86/openssl_password.phpt
  • Resources/Data/x64/x86/openssl_verify_basic.phpt
  • Resources/Data/x64/x86/shadow_core.phpt
  • Resources/Data/x64/x86/userstreams_003.phpt
  • Resources/Data/x64/zend_vm_opcodes.c
  • Resources/Data/zend_ini_scanner_defs.h
  • Resources/htwj
  • Resources/maddisAsm_.bpl
    .dll windows:5 windows x86 arch:x86

    22531f752b354d949452fbdf15d6da72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/madexcept_.bpl
    .dll windows:5 windows x86 arch:x86

    2a873ab64f922b5d3d6841d9d0c267c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/rncr
  • Resources/rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    71ef3c08452290b9b380ced40a0015c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/vcl120.bpl
    .dll windows:5 windows x86 arch:x86

    8df8c3c6e47c73ef6aa19581542f5b9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/vclx120.bpl
    .dll windows:5 windows x86 arch:x86

    7f2e89ebd535b27c805b9455db0d7172


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Set-up.exe
    .exe windows:4 windows x86 arch:x86

    ff67bf11cc36c35722df0b7f1c459325


    Code Sign

    Headers

    Imports

    Sections