III_VC_-_Classic_AXIS.7z
- SHA256 ac99cf6fa6b8100c54093122a6b617a1cffda382185673009c9354e55db494bd
Password
123456
Overview
overview
3Static
static
3III/Classi...II.dll
windows10-2004-x64
3III/Classi...II.dll
windows11-ltsc_2024-x64
3III/SA LCS...rt.url
windows10-2004-x64
1III/SA LCS...rt.url
windows11-ltsc_2024-x64
1VC/Classic...VC.dll
windows10-2004-x64
3VC/Classic...VC.dll
windows11-ltsc_2024-x64
3VC/SA LCS ...rt.url
windows10-2004-x64
1VC/SA LCS ...rt.url
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
III/Classic AXIS/ClassicAxisIII.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
300 seconds
Behavioral task
behavioral2
Sample
III/Classic AXIS/ClassicAxisIII.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
300 seconds
Behavioral task
behavioral3
Sample
III/SA LCS Vehicle Camera Port.url
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral4
Sample
III/SA LCS Vehicle Camera Port.url
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral5
Sample
VC/Classic AXIS/ClassicAxisVC.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
300 seconds
Behavioral task
behavioral6
Sample
VC/Classic AXIS/ClassicAxisVC.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
300 seconds
Behavioral task
behavioral7
Sample
VC/SA LCS Vehicle Camera Port.url
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral8
Sample
VC/SA LCS Vehicle Camera Port.url
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
General
- Target III_VC_-_Classic_AXIS.7z
- Size 220KB
- Sample261003-3j4jpsyhkh
- SHA256 ac99cf6fa6b8100c54093122a6b617a1cffda382185673009c9354e55db494bd
- MD5 5fc927c11ba0b2ec8b6e2413e8d2dd93
- SHA1 62686f010ca13977ab38ce71a9a021bdd7847f42
- SHA512 e9571a6115b58180373ae1ac973bd055550ebc8c7b6a3ed4e85cd65a65335405b9652f10fd5815b61fb70ba0931c943e0a9c4e3455a97a00dd96a8206ad08f16
- SSDEEP 3072:k4Bs7YPspcQ+eqa/UxL6xux54z3IJsrNR39gaJ7R6CxFV0pmmbl2HhahAjc7xGBR:kb7YPsd+4eBxxJsrXr7PdbWycNza+A
- TLSH T1B424123F93F266BF445F94404E5BBF3D824AD038085116906B1DA7EEF2D26E10B997A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/III/Classic AXIS/ClassicAxisIII.asi unpack001/VC/Classic AXIS/ClassicAxisVC.asi
File Explorer
-
III_VC_-_Classic_AXIS.7z.7z 220KB
-
III/Classic AXIS/ClassicAxisIII.asi.dll 527KB
-
III/Classic AXIS/ClassicAxisIII.ini990B
-
III/Leiame (ou morra).txt1KB
-
III/Readme (or die).txt1KB
-
III/SA LCS Vehicle Camera Port.url.url 178B
-
VC/Classic AXIS/ClassicAxisVC.asi.dll 520KB
-
VC/Classic AXIS/ClassicAxisVC.ini898B
-
VC/Leiame (ou morra).txt1KB
-
VC/Readme (or die).txt1KB
-
VC/SA LCS Vehicle Camera Port.url.url 178B
III/Classic AXIS/ClassicAxisIII.asi
- IMPHASH a17bfdbb31a1329e49b4225a09c35c16
- SHA256 d64550b62a3c9b3a5cfe1614fee233692cd4dd8af6b9e924c927e5838f02e0ce
- MD5 4307c391cf13e028f51f1c5395fc6863
- SHA1 89d9e56bba7d94da17896b84116f29a6ab82db65
- SHA512 04d79b3bd518d961d285e3ad483b06e4e49f7e6a1c7380ad76075100e26418d30e94909e69ac56af1623f5711ec909c03d43a61e0b3dc1dc17422078fd4bff6a
- SSDEEP 12288:bezKAy/azaDMe3xKCkWX+NO68OqNYBChj:q2A2KCkWXnO
- TLSH T1E0B47D10B10AC336D6BE0478459B8BBB602ED9A107B84AE7BFD87D7A0D607C11737997
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123456
Minor OS version
0
Major OS version
6
Entry point
219142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetLastError
GetCurrentProcess
VirtualProtect
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW
SetEndOfFile
WriteConsoleW
HeapSize
CreateFileW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
GetStdHandle
GetFileType
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
user32
MessageBoxA
GetActiveWindow
Name
.text
Size
356KB
Virtual Size
356KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
51KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=29, id=259, version=27412,
count=171, id=261, version=27412,
count=24, id=260, version=27412,
count=16, id=260, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=22, id=259, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=71, id=261, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=5, id=257, version=27412,
count=99, id=1, productName=Unmarked objects,
count=32, id=265, version=31329,
count=3, id=261, version=31329,
count=1, id=255, version=31329,
count=1, id=258, version=31329,
III/Classic AXIS/ClassicAxisIII.ini
- SHA256 19fe11413ecc94a936c746dafba669fe5a02e83dbbda393bf09a22ff18db6629
- MD5 0d47507929131cb2c3dc535d7a2092dc
- SHA1 fcbae1588c9ffc6a468e4445c9d30a91fa0f4f16
- SHA512 6d8a658529ea9d4fcf7d081f71548fd8da74aa4be1b89f3baed154f6e7704e9399cd53d5a1a4ec61c6ca1293e86755c9134f552e5be47202a40c460c701ccb7a
- TLSH T18911CE4E965C4BA2EDB2CE51D4009192773A45944B4B74887E4D855C322FC619E3B4AF
- MD5 SHA1 SHA512 TLSH
III/Leiame (ou morra).txt
- SHA256 f9949004a2f852915667ef4b4eefe5bf339b283c6d58e56da1fff500cbf57c1a
- MD5 de0ac4f1dae840c4a8074e890afca232
- SHA1 210d3d30206264a5f90f39ef7fcb1ccfd0671c42
- SHA512 316765d4c6ec28e1c0b979f84eb6add4c2e01b7aca1b5b67d94462f1b2b453e15cfe49e0a496fe78bd12a297ad6795e4b3a890daccfc1f9c999a1ff15d80f1dd
- TLSH T12F110EDD1CCFD4111936D2CA1C1BB222EAA50986C59688F93FBC8B199B51BCF116D9CC
- MD5 SHA1 SHA512 TLSH
III/Readme (or die).txt
- SHA256 9afb91f089ea4d29aa96e4fa812ef7c2c12a2ec7bb1fd0e496001eb3fdc33a93
- MD5 efbabc928216f0e282f32fb1f4484acc
- SHA1 d37af259dd10977d8919582d5dcf45356bef17b4
- SHA512 d60947cf603fd78ae54053669a172e9054bca500b58da26949300b9f11b1de7932fc96c2fbaaecaab1fe475ee2a9e6dbf06646f4d1dffafca7f5ac8968d77ff1
- TLSH T19021EFCA3CC7D52115B2D6C7181B7621F7640246C4A664F83FAC450C8B126EA02AD5CC
- MD5 SHA1 SHA512 TLSH
III/SA LCS Vehicle Camera Port.url
- SHA256 e8eaaf26fd7c704a144e8e109b1cb219c41fd6d23b1596f05da308a3103ecd9d
- MD5 af30f522361129e249777a89a0ae9ef1
- SHA1 786903412cbe0c1faf277cea10bb04ba0155c887
- SHA512 1b8095aae1e20bfc22e0006c674c7bcb9e1ecc80284dc5e51b04183f35037ed269832eef996683af8797ebcf8b0f205c0c83bab645a398ecb3ca58db119376c7
- TLSH T1BAC080DD40819367E4824D460074F514482EBE959CF2DCCC67F4DF8E4D05DD591055E5
- MD5 SHA1 SHA512 TLSH
VC/Classic AXIS/ClassicAxisVC.asi
- IMPHASH a17bfdbb31a1329e49b4225a09c35c16
- SHA256 1a9e4c97945885fedadc98166dd200876002a572655476b0dab2d92dc673059f
- MD5 8338a6e164a82fc723b07ccf843d0bd6
- SHA1 27044b41de7516514bc59f6ba3423d5c41899111
- SHA512 ab6747011ab51744a31f8953dbb31bc425b73be0c04c081af6b0802c7f806474bdbb919fe0f3fcff75d33f2e91370e0c16bbf8a3b907312396dded601bc4e949
- SSDEEP 12288:W9K+YwVZVf9WjC3NQD1nVvdXCJXR2eB7:WZWjckVWh2K7
- TLSH T1FCB47D20B54EC126C6EF0274995B8AEF542DC6A007BD8AE777986E7F4D607C11733A0B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123456
Minor OS version
0
Major OS version
6
Entry point
197869
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetLastError
GetCurrentProcess
VirtualProtect
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW
SetEndOfFile
WriteConsoleW
HeapSize
CreateFileW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
GetStdHandle
GetFileType
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
user32
MessageBoxA
GetActiveWindow
Name
.text
Size
337KB
Virtual Size
336KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
96KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
63KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=29, id=259, version=27412,
count=171, id=261, version=27412,
count=24, id=260, version=27412,
count=16, id=260, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=22, id=259, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=71, id=261, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=5, id=257, version=27412,
count=99, id=1, productName=Unmarked objects,
count=31, id=265, version=31329,
count=3, id=261, version=31329,
count=1, id=255, version=31329,
count=1, id=258, version=31329,
VC/Classic AXIS/ClassicAxisVC.ini
- SHA256 6585338aa46d1cfd30b0812f0065af8c16712fe435e56480b08c7af05d2b09e1
- MD5 1440dbb4aab9415614bc24de5f5da65b
- SHA1 7800f438faddc56d143b81116aa15133f52e6778
- SHA512 a95a61f64fd09d7fc224a2904e65ce139349da64472efff22ced00900cb5101b60213a99d94a3b5fa6df4fc63f8edb941c2a2c328c0532d0e29d0b7082c2d5a5
- TLSH T12C11C04D565C4BA2EDB2CE51C800A552723A05904B8BB84C7E4D855C362FCB25E3B4BF
- MD5 SHA1 SHA512 TLSH
VC/Leiame (ou morra).txt
- SHA256 5fa01db18def85666fe9b2ef06b93aad5367280a3168484c4ddd9d664d425f47
- MD5 9822d04363da96fa0db263bd981d233b
- SHA1 9daf75a2cb86e384af07c5c892b4aac4584cbe59
- SHA512 051a5a7560dbfe1bffc6368dcc1913789d5dcd9892ce115fa964b05ac2aec05aae63008ab3b9406eafbc9f75a9d3296d046a3437ded2fc1c63de4d7ef96d30d0
- TLSH T18811CEDD1CCFD4111936E2CB1C1BB222EAA50986C59688F93EBC4B199B51BCF116D5CC
- MD5 SHA1 SHA512 TLSH
VC/Readme (or die).txt
- SHA256 455992ac208d68600c82edf1ddf38cd353c60bec1e90b5035b10ced59f74f211
- MD5 fe42b1f8ceb56d68c7a26cd8efe4c194
- SHA1 ff241c355d13a1d46e16ff1e287a2ec8c05ca1a1
- SHA512 98ca1189d702927ae70fe4f871695a4f9491cf309d08b46faae66fe90f2998018c0c4a054f2c67200a9cf9c1f3d97a838f159837658bb49562e00d0e738bc81d
- TLSH T1B5210ECA3CCBD62015B3D6CB181F7621F664018AC4A668F83FAC450C8B226EA02AD1CC
- MD5 SHA1 SHA512 TLSH
VC/SA LCS Vehicle Camera Port.url
- SHA256 e8eaaf26fd7c704a144e8e109b1cb219c41fd6d23b1596f05da308a3103ecd9d
- MD5 af30f522361129e249777a89a0ae9ef1
- SHA1 786903412cbe0c1faf277cea10bb04ba0155c887
- SHA512 1b8095aae1e20bfc22e0006c674c7bcb9e1ecc80284dc5e51b04183f35037ed269832eef996683af8797ebcf8b0f205c0c83bab645a398ecb3ca58db119376c7
- TLSH T1BAC080DD40819367E4824D460074F514482EBE959CF2DCCC67F4DF8E4D05DD591055E5
- MD5 SHA1 SHA512 TLSH