General

  • Target

    payloads.7z

  • Size

    4.3MB

  • MD5

    15cf3b0e76984199b371021d5b858200

  • SHA1

    e4c37862729be6cd4cbe93df690fa94a8196416d

  • SHA256

    f10ff26e4882c7eab600b372b29278374cda555f4da20b93d8d600a3222a59e2

  • SHA512

    a81310823cfbf3e199a6b0b792c2f1092ead599f5c19193eadadfa6875471284c86c185a393f826fe330df4445d2a1e87c7f660e097847061c59dcb95e462fd9

  • SSDEEP

    98304:TY73WCRyTcj5K0PzxUlI4LzonQZn3VYjzKF4TXCrwmbxMZ+m:FCRDjoQzw06nlGY8CMmbxMJ

Score
10/10

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

Files

  • payloads.7z
    .7z

    Password: infected

  • payload.exe.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • payload.exe_protected.exe
    .exe windows x86

    Password: infected


    Headers

    Sections