sample[.]7z | Triage™

General

Target
sample.7z
Size 1.3MB
Sample220913-g6tr5aafem
SHA256 c8a5e02417285b85da288818cca8a6900122011890fa92c9053787dfb195b8c6
MD5 18d4c45fff91cb73b54aa8ad02d52bc4
SHA1 63c2077289271f1789b926e1304c75d0a486e8a8
SHA512 f1381d4bfd9c1cd20dcd01dde1e461025f52a454fbfe91af0ce414e369fb0d2f951b5aaf79c5284c86201f8368120845860d74be9bac58d638387a422e441912
SSDEEP 24576:Jh++iS8blXCjfYBonNLkSeP5w9xUE9VKknD2mZXBXEUiP8iX+qSPb0w2/8zZAk2k:uSOlSLYqmPEeMKknSU/KXSP08zS4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

sample.7z

.7z 1.3MB
sample/Document.lnk

.lnk 1KB
sample/son/enchanting.dat

.dll 2.8MB
sample/son/soaring.bat

1KB

sample.7z

SHA256 c8a5e02417285b85da288818cca8a6900122011890fa92c9053787dfb195b8c6
MD5 18d4c45fff91cb73b54aa8ad02d52bc4
SHA1 63c2077289271f1789b926e1304c75d0a486e8a8
SHA512 f1381d4bfd9c1cd20dcd01dde1e461025f52a454fbfe91af0ce414e369fb0d2f951b5aaf79c5284c86201f8368120845860d74be9bac58d638387a422e441912
SSDEEP 24576:Jh++iS8blXCjfYBonNLkSeP5w9xUE9VKknD2mZXBXEUiP8iX+qSPb0w2/8zZAk2k:uSOlSLYqmPEeMKknSU/KXSP08zS4
MD5 SHA1 SHA512 SSDEEP

Password

infected

sample/son/enchanting.dat

IMPHASH 8c7135d5af14c35536b780a7d9bf0878
SHA256 d11d07a44788e6b71ff138b96caeb4e81adbbcceee74ac809264bfae7667ed66
MD5 dc7992c5d6c2518464ee8d8f2c509b32
SHA1 d8866baf07a5dab2f407439ca5f7909e2bb6c461
SHA512 e11630d07d2a9bc53c7ec4812c7b09ac961d808c08b433225b3920d11e89f752109038f7d6d1e630e8e01b21be51ac8451ce46c7e33dc4cd9d75b1bcb8272180
SSDEEP 49152:UB6vxhwKXnR/Be0qCUrBdBhs64cOYjBNMHmug7Lx:UB6vxhgAYDMgLx
MD5 SHA1 SHA512 SSDEEP

windows x64

Password

infected

Minor OS version

Major OS version

Entry point

20956

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCommandLineA SetCurrentDirectoryA CreateFileA FindClose FindFirstFileA FindNextFileA GetFileType SetFileAttributesA SetFileTime CloseHandle HeapAlloc HeapFree GetProcessHeap ExitProcess GetCurrentThreadId GetModuleFileNameA GetModuleHandleA SwitchToFiber CreateFiber CreateNamedPipeA WaitNamedPipeA GetComputerNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx InterlockedFlushSList GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle GetModuleHandleExW WriteConsoleW GetCurrentProcess TerminateProcess MultiByteToWideChar WideCharToMultiByte WriteFile LCMapStringW FindFirstFileExA IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize HeapReAlloc SetStdHandle SetFilePointerEx CreateFileW RaiseException

Resubmissions

Sharing