General

  • Target

    PW_document_10-17#invoice_201_ISO.zip

  • Size

    150KB

  • MD5

    ca4c34722e45d069de1fbf5902e960c6

  • SHA1

    caea8c335f6dcd309cad6a8d2609d74b80a76b3d

  • SHA256

    1c5bb6aa686c367e1e7c9fff91225fa65526b26ebc02cbc1e6f0106bc91ba91f

  • SHA512

    451052515c4f371f19d5c8536af413762e89b918a0fe1c00e748afd5e84a1f7c679c881258918f67c491df164305cd66133ccd0493586343078719fc9f313ea2

  • SSDEEP

    3072:8/ysLl0Jy2vxKatn7q6p0mVErg3ApVqfuxmasb/6+ly/sFI7HMgw8uT7vw:/66yQKQ+6pJm5pVfsasb/6+ly/sFICvI

Score
N/A

Malware Config

Signatures

Files

  • PW_document_10-17#invoice_201_ISO.zip
    .zip

    Password: infected

  • document_10-17#invoice_201_ISO/Files.lnk
    .lnk
  • document_10-17#invoice_201_ISO/sagsagdonyen/logginghydroxy.bat
  • document_10-17#invoice_201_ISO/sagsagdonyen/oversubscribing.dat
    .dll .js windows x64