ishod_6726_dolzhnost.zip
- SHA256 5a607965caac6829cf9327c795fb18ae6a318e687a2fdc922222f3c0de167cbf
Overview
overview
8Static
static
5detailInstance.pub
windows10-2004-x64
3detailInstance.pub
windows11-21h2-x64
3eventFunction.ps1
windows10-2004-x64
3eventFunction.ps1
windows11-21h2-x64
3goland.exe
windows10-2004-x64
1goland.exe
windows11-21h2-x64
1ishod_6726...st.pdf
windows10-2004-x64
3ishod_6726...st.pdf
windows11-21h2-x64
3libcrypto.dll
windows10-2004-x64
1libcrypto.dll
windows11-21h2-x64
1ssh-shellhost.exe
windows10-2004-x64
1ssh-shellhost.exe
windows11-21h2-x64
1sublimetext.exe
windows10-2004-x64
1sublimetext.exe
windows11-21h2-x64
1trello.exe
windows10-2004-x64
1trello.exe
windows11-21h2-x64
1twitter.exe
windows10-2004-x64
3twitter.exe
windows11-21h2-x64
3ishod_6726...��.lnk
windows10-2004-x64
8ishod_6726...��.lnk
windows11-21h2-x64
8Behavioral task
behavioral1
Sample
detailInstance.pub
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
detailInstance.pub
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
eventFunction.ps1
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
eventFunction.ps1
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
goland.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
goland.exe
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
ishod_6726_dolzhnost.pdf
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
ishod_6726_dolzhnost.pdf
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
libcrypto.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
libcrypto.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
ssh-shellhost.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
ssh-shellhost.exe
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
sublimetext.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
sublimetext.exe
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
trello.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
trello.exe
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
twitter.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
twitter.exe
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
ishod_6726_dolzhnost.pdf.lnk
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
ishod_6726_dolzhnost.pdf.lnk
Resource
win11-20260130-en
A PDF can contain malformed data to evade detection
Checks for missing Authenticode signature.
| resource |
|---|
| unpack002/goland.exe |
| unpack002/twitter.exe |
Unsigned PE
Checks for missing Authenticode signature.
Dec 13, 2023
CN=Microsoft 3rd Party Application Component,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=6, id=259, version=30795,
count=180, id=261, version=30795,
count=12, id=260, version=30795,
count=7, id=253, version=32533,
count=33, id=261, version=32533,
count=15, id=260, version=32533,
count=10, id=259, version=32533,
count=140, id=1, productName=Unmarked objects,
count=9, id=257, version=30795,
count=15, id=259, version=32825,
count=515, id=260, version=32825,
count=1, id=256, version=32825,
count=1, id=255, version=32825,
count=1, id=151,
count=1, id=258, version=32825,
Dec 13, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=5, id=259, version=30795,
count=141, id=261, version=30795,
count=10, id=260, version=30795,
count=40, id=261, version=32533,
count=17, id=260, version=32533,
count=9, id=259, version=32533,
count=5, id=257, version=30795,
count=118, id=1, productName=Unmarked objects,
count=2, id=264, version=32825,
count=1, id=255, version=32825,
count=1, id=151,
count=1, id=258, version=32825,
Dec 13, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=219, id=261, version=30795,
count=6, id=253, version=32533,
count=40, id=261, version=32533,
count=18, id=260, version=32533,
count=8, id=259, version=32533,
count=9, id=259, version=30795,
count=14, id=260, version=30795,
count=16, id=257, version=30795,
count=3, id=257, version=32825,
count=432, id=1, productName=Unmarked objects,
count=8, id=260, version=32825,
count=160, id=264, version=32825,
count=1, id=255, version=32825,
count=1, id=151,
count=1, id=258, version=32825,
Dec 13, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=6, id=259, version=30795,
count=210, id=261, version=30795,
count=11, id=260, version=30795,
count=3, id=253, version=32533,
count=40, id=261, version=32533,
count=19, id=260, version=32533,
count=10, id=259, version=32533,
count=16, id=257, version=30795,
count=3, id=257, version=32825,
count=261, id=1, productName=Unmarked objects,
count=62, id=264, version=32825,
count=1, id=255, version=32825,
count=1, id=151,
count=1, id=258, version=32825,
Unsigned PE
Checks for missing Authenticode signature.