7418326158[.]zip | Triage™

Resubmissions

04/05/2022, 21:49

220504-1pvsmshdgr10

04/05/2022, 21:45

220504-1l86vsega910

Sharing

Copy URL Twitter E-mail

General

Target
7418326158.zip
Size 3.5MB
Sample220504-1pvsmshdgr
SHA256 469b2a19deab693e53b7ea3d2c26833067fe6be1b9493505091fd9f586c54fb0
MD5 357ef1fdcb7bf7a66b51a197ad38485c
SHA1 3acca6a8bc4d733089fe98feb50416dadeb98651
SHA512 e279f69f11dcb552cf0d767d7c3329e70ccb018e0b2ac747ed635097b5f03b874574b5c1b8f44379b4a366e7bdcaeb183aa3c43ce91c544d6f3995b59e1a6bcc
SSDEEP 49152:/yPnnpFqTsOR4Vi/v9Y2XxoGn7azOSYPpfFcwdKFlR1jkT3IhNiqTd02mY9C3ttS:Sli9Y2XxoY70OTxF0faExmYaFzoTmWs+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

7418326158.zip

.zip 3.5MB
1bcd1d1521d0879173fb5adfd51fad8b9100524dd6f46f79af757d8b4dc00c15

.exe 3.5MB

7418326158.zip

SHA256 469b2a19deab693e53b7ea3d2c26833067fe6be1b9493505091fd9f586c54fb0
MD5 357ef1fdcb7bf7a66b51a197ad38485c
SHA1 3acca6a8bc4d733089fe98feb50416dadeb98651
SHA512 e279f69f11dcb552cf0d767d7c3329e70ccb018e0b2ac747ed635097b5f03b874574b5c1b8f44379b4a366e7bdcaeb183aa3c43ce91c544d6f3995b59e1a6bcc
SSDEEP 49152:/yPnnpFqTsOR4Vi/v9Y2XxoGn7azOSYPpfFcwdKFlR1jkT3IhNiqTd02mY9C3ttS:Sli9Y2XxoY70OTxF0faExmYaFzoTmWs+
MD5 SHA1 SHA512 SSDEEP

Password

infected

1bcd1d1521d0879173fb5adfd51fad8b9100524dd6f46f79af757d8b4dc00c15

IMPHASH 32569d67dc210c5cb9a759b08da2bdb3
SHA256 1bcd1d1521d0879173fb5adfd51fad8b9100524dd6f46f79af757d8b4dc00c15
MD5 091972a4b28199a3dcf548286be0336c
SHA1 11b0289c1ad3c75c53b03e8945b21c8624d6166d
SHA512 b581051aae417d8f84331133e7d17dd468c942150c6e896f92c396184e4af588e7aef082e954e82892d92642be226a26fdd1df064ff2490e9dfbf842f68b57ea
SSDEEP 98304:xbCvLUBsgXrfAcxXvULy1NJIr9Pl+hvXU29Ck:xgLUCgXrf71NW9Pl+TCk
MD5 SHA1 SHA512 SSDEEP

windows x86

Password

infected

Minor OS version

Major OS version

Entry point

102668

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysStringLen SysAllocStringLen VariantClear

user32

DialogBoxParamW SetWindowLongW GetWindowLongW GetDlgItem LoadStringW CharUpperW DestroyWindow EndDialog PostMessageW SetWindowTextW ShowWindow MessageBoxW SendMessageW LoadIconW KillTimer SetTimer

shell32

ShellExecuteExW

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _except_handler3 _beginthreadex memset wcsstr free malloc memcpy _CxxThrowException _purecall memmove memcmp wcscmp __CxxFrameHandler

kernel32

WaitForSingleObject GetStartupInfoA InitializeCriticalSection ResetEvent SetEvent CreateEventW lstrlenW lstrcatW VirtualFree VirtualAlloc Sleep WaitForMultipleObjects GetFileInformationByHandle GetStdHandle GlobalMemoryStatus GetSystemInfo GetCurrentProcess GetProcessAffinityMask SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindClose GetCurrentThreadId GetTickCount GetCurrentProcessId GetTempPathW GetCurrentDirectoryW SetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW GetModuleHandleW GetProcAddress RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime GetSystemDirectoryW FormatMessageW LocalFree GetModuleFileNameW LoadLibraryExW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError GetVersionExW GetCommandLineW CreateProcessW CloseHandle