8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5[.]zip

General

Target
8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5.zip
Size 236KB
Sample220322-pfgnwabdgn
SHA256 8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5
MD5 989c5de8ce5ca07cc2903098031c7134
SHA1 73581818a30d3fb3e1f9e37de0c3eb55bfc0c236
SHA512 7d1f2ff63b312019f047d68a81bb38b737507a43816aa576c385c4f15809fcd924003c0b7a8bc5a3c0ddb5040297de02b30cc7da753b353ba1543539bef7f3b0
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5.zip

.zip 236KB
cpcrs.exe

.exe 419KB
csrss.exe

.exe 412KB

8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5.zip

SHA256 8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5
MD5 989c5de8ce5ca07cc2903098031c7134
SHA1 73581818a30d3fb3e1f9e37de0c3eb55bfc0c236
SHA512 7d1f2ff63b312019f047d68a81bb38b737507a43816aa576c385c4f15809fcd924003c0b7a8bc5a3c0ddb5040297de02b30cc7da753b353ba1543539bef7f3b0
MD5 SHA1 SHA512

cpcrs.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe
MD5 7d20fa01a703afa8907e50417d27b0a4
SHA1 320116162d78afb8e00fd972591479a899d3dfee
SHA512 0dcebe2598e6ccb51f0609831c93071421049eb924f83871e95c5a280af0d2e76630dfc47c5a2780eb18d55ee9690d6c83aabd8f1043cc2cdc21d9fe5425b892
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

263042

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

csrss.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 30b3cbe8817ed75d8221059e4be35d5624bd6b5dc921d4991a7adc4c3eb5de4a
MD5 b4f0ca61ab0c55a542f32bd4e66a7dc2
SHA1 43b3d5ffae55116c68c504339c5d953ca25c0e3f
SHA512 9135c8ea4a786b789477e892cf117274f897ead370c732f4f4c442cff91467fc9aea33239032314130dc09bdaf7230ffe2f71a0dc1e8fce793d1b7ff93b4ae3e
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

270594

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5.zip

cpcrs.exe

mscoree

csrss.exe

mscoree

Sharing

General

Malware Config

Signatures

File Explorer

8dd8b9bd94de1e72f0c400c5f32dcefc114cc0a5bf14b74ba6edc19fd4aeb2a5.zip

cpcrs.exe

mscoree

csrss.exe

mscoree