Overview

overview

10

Static

static

3

Config.exe

windows7-x64

10

Config.exe

windows10-2004-x64

10

$TEMP/Basis.rtf

windows7-x64

3

$TEMP/Basis.rtf

windows10-2004-x64

1

$TEMP/Degrees.rtf

windows7-x64

3

$TEMP/Degrees.rtf

windows10-2004-x64

1

$TEMP/Ensures.rtf

windows7-x64

3

$TEMP/Ensures.rtf

windows10-2004-x64

1

$TEMP/Loving.rtf

windows7-x64

4

$TEMP/Loving.rtf

windows10-2004-x64

1

$TEMP/Pine.rtf

windows7-x64

3

$TEMP/Pine.rtf

windows10-2004-x64

1

$TEMP/Pm.rtf

windows7-x64

3

$TEMP/Pm.rtf

windows10-2004-x64

1

$TEMP/Tenant.rtf

windows7-x64

3

$TEMP/Tenant.rtf

windows10-2004-x64

1

$TEMP/Trunk.rtf

windows7-x64

3

$TEMP/Trunk.rtf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Config.exe

  • Size

    1.0MB

  • MD5

    de04368755c40b2d0b00fbb894b3d58f

  • SHA1

    ccac583d7ae83aaef3baed808d4c7a832eaf55f1

  • SHA256

    ffc3ab51f9afc6124b648903a43847d36138f9f4582e426bf2c11025ec918fe2

  • SHA512

    0f09e87152206cf0efbae4947e806df2aa1307127504729470f5e39d99aec10333505496a37f35dcea3841b54134bb74568f274d340e4ddd3e4773411afeaabd

  • SSDEEP

    24576:aw5Xa/r+mWglhh5+4YHUar9YQ/w6lxFU+P17mg+2h:rgpzncUar9YQ/ntjPR+2h

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Config.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Headers

    Imports

    Sections

  • $TEMP/Basis.rtf
  • $TEMP/Degrees.rtf
  • $TEMP/Ensures.rtf
  • $TEMP/Loving.rtf
  • $TEMP/Pine.rtf
  • $TEMP/Pm.rtf
  • $TEMP/Tenant.rtf
  • $TEMP/Trunk.rtf
  • $TEMP/Warrant.rtf
    .cab
  • Aurora
  • Ball
  • Bridge
  • Dodge
  • Forestry
  • Hughes
  • Ignore
  • Penny
  • Snapshot
  • Solve
  • Victim