9320335e97cdd424812d2eca07cd65145a8ffa772102308ea39294ea2a1d7090.zip
- SHA256 d39a34c9a9bd2eace9b016b4e399d802b029557d44838223498636bc58b1b3d6
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
160-4833933645027883.exe
Resource
win7-20221111-en
windows7-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
160-4833933645027883.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
10 signatures
150 seconds
General
- Target 9320335e97cdd424812d2eca07cd65145a8ffa772102308ea39294ea2a1d7090.zip
- Size 365KB
- Sample221124-rf5f2shf33
- SHA256 d39a34c9a9bd2eace9b016b4e399d802b029557d44838223498636bc58b1b3d6
- MD5 397957cd9d063b74b03a534f8e64704b
- SHA1 c3d27a7567795039bac604344a9b5a9e2b4ecc94
- SHA512 0fd79339dd6f97d27e12751fb1f9c77876fceb8b9ab2ed57e75ec4105afb389a203c71b27fe9a60603488ad9f0a8c874013cfcedd0ba001b39918e049aa2185b
- SSDEEP 6144:gUarSAqu35p/7v2nhCHIZfeS95ilvIx9ECa7Ip517qWaqiNWlg:HarSSXs0HSkIULs512WaqUWq
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- NSIS installer 2 IoCs
resource yara_rule static1/unpack002/160-4833933645027883.exe nsis_installer_1 static1/unpack002/160-4833933645027883.exe nsis_installer_2
File Explorer
-
9320335e97cdd424812d2eca07cd65145a8ffa772102308ea39294ea2a1d7090.zip.zip 365KB
-
9320335e97cdd424812d2eca07cd65145a8ffa772102308ea39294ea2a1d7090.zip.zip 364KB
-
160-4833933645027883.exe.exe 376KB
9320335e97cdd424812d2eca07cd65145a8ffa772102308ea39294ea2a1d7090.zip
- SHA256 9320335e97cdd424812d2eca07cd65145a8ffa772102308ea39294ea2a1d7090
- MD5 70c411a9753bb90abd5597a4c0dc327a
- SHA1 dafbd8b0c67b00cf65e08cdafa20ecc378d825ff
- SHA512 5376601589634629806c1e1bac95d1d3d966061d01d2186ed7cab1a422a0637df3461bfdc9f669a9abdbcadb0ed8bcda61977a1c6cd468cedf8ecf90f3312024
- SSDEEP 6144:CVF7w88xM3dxFa0LiCCEPnedspOjYj2d8xoGAZNj1a07C3aAeraWPT6KFa7HzhsL:CPD8xMfA0LiAINd83ALjIqC3aLjT6KFz
- MD5 SHA1 SHA512 SSDEEP
Password
infected
160-4833933645027883.exe
- IMPHASH ab6770b0a8635b9d92a5838920cfe770
- SHA256 d254745ca2edd62c5e9d3231b3131ae065b2e1759fe9916df96e6c14af59a99e
- MD5 49b30367cc4e82565b22cf3299d673c0
- SHA1 fc09b42732f4882bc43845aa16448db259db2820
- SHA512 c1c727c156fc8933a71b0aec68bba4c9ec9f7fdfe0b106e0554c0d20f485823c2e4965ec66713e8f0f5557cc4dc8daa6bb5b2715836ac7a62e12269e626b01df
- SSDEEP 6144:QBn1tG7w8exMNhxFa0L0CCEPnedspOjYj2d8xKGAZNj1a0vC3aAeFaWPT6QFa7Hm:gQDexMBA0L0AYNd8VALjIMC3aLtT6QFz
- MD5 SHA1 SHA512 SSDEEP
-
NSIS installer
Password
infected
Minor OS version
Major OS version
Entry point
12879
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetFileAttributesA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CompareFileTime
SearchPathA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
CreateDirectoryA
lstrcmpiA
GetTempPathA
GetCommandLineA
GetVersion
SetErrorMode
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
LoadLibraryA
SetFileTime
CloseHandle
GlobalFree
lstrcmpA
ExpandEnvironmentStringsA
GetExitCodeProcess
GlobalAlloc
WaitForSingleObject
ExitProcess
GetWindowsDirectoryA
GetProcAddress
FindFirstFileA
FindNextFileA
DeleteFileA
SetFilePointer
ReadFile
FindClose
GetPrivateProfileStringA
WritePrivateProfileStringA
WriteFile
MulDiv
LoadLibraryExA
GetModuleHandleA
MultiByteToWideChar
FreeLibrary
user32
GetWindowRect
EnableMenuItem
GetSystemMenu
ScreenToClient
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetForegroundWindow
PostQuitMessage
RegisterClassA
EndDialog
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
DestroyWindow
OpenClipboard
TrackPopupMenu
SendMessageTimeoutA
GetDC
LoadImageA
GetDlgItem
FindWindowExA
IsWindow
SetClipboardData
SetWindowLongA
EmptyClipboard
SetTimer
CreateDialogParamA
wsprintfA
ShowWindow
SetWindowTextA
gdi32
SelectObject
SetBkMode
CreateFontIndirectA
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
advapi32
RegDeleteValueA
SetFileSecurityA
RegOpenKeyExA
RegDeleteKeyA
RegEnumValueA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegEnumKeyA
comctl32
ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ