7599196154[.]zip | Triage™

General

Target
7599196154.zip
Size 4.0MB
Sample220623-kmlh7acdam
SHA256 525d3fed0413eeac21603b00ccba1ff4331ceeb848efcad297d1eba91aa03331
MD5 e8472c88f3128da8370521dbb1c6b78a
SHA1 40bf6fdaf5877fcfc5a898a043f6772ff8a802db
SHA512 e3ae7f3656f1e8b23906919568f03b9ea9dc8f5c259c392eb22f6783199530bbf1deeea3e2771ad3aa72b2bbbb0bda04a48465a773bd6f9dec2031a24a5d74fe
SSDEEP 98304:dyKSqwPfCGGCC1NUtlBfPnQmPbmcNQvN0unt1SFXF:riGR1NUtlBn3mc5W1mF
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/4e78dbfd9d5fcc891dc5bf5c37930188a51b817f9c94406717ec3b14c300de1a	upx

File Explorer

7599196154.zip

.zip 4.0MB
4e78dbfd9d5fcc891dc5bf5c37930188a51b817f9c94406717ec3b14c300de1a

.exe 4.0MB

7599196154.zip

SHA256 525d3fed0413eeac21603b00ccba1ff4331ceeb848efcad297d1eba91aa03331
MD5 e8472c88f3128da8370521dbb1c6b78a
SHA1 40bf6fdaf5877fcfc5a898a043f6772ff8a802db
SHA512 e3ae7f3656f1e8b23906919568f03b9ea9dc8f5c259c392eb22f6783199530bbf1deeea3e2771ad3aa72b2bbbb0bda04a48465a773bd6f9dec2031a24a5d74fe
SSDEEP 98304:dyKSqwPfCGGCC1NUtlBfPnQmPbmcNQvN0unt1SFXF:riGR1NUtlBn3mc5W1mF
MD5 SHA1 SHA512 SSDEEP

Password

infected

4e78dbfd9d5fcc891dc5bf5c37930188a51b817f9c94406717ec3b14c300de1a

SHA256 4e78dbfd9d5fcc891dc5bf5c37930188a51b817f9c94406717ec3b14c300de1a
MD5 7ee95161e2c413fcaaaab8a308fe8204
SHA1 96eefc3743931d2817c9d2f3fb4f8c409c6f93a0
SHA512 5916cea41952da371e7b93a394967860817ad2c7ebc2378321b0ff50076c7c582634ac1b268d3582270af50c181d10392b5390a57ce5946da80be3347eec527b
SSDEEP 98304:3SG3nNVF/ZdTsa7AgnjeZnfCeD7W6N0m882ZJ+k:37UaMgQkTJ+
MD5 SHA1 SHA512 SSDEEP

windows x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Minor OS version

Major OS version

Entry point

14443824

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Sharing