Resubmissions

02/01/2023, 15:58

230102-tekflaeg63 8

02/01/2023, 15:37

230102-s2n7maeg38 8

General

  • Target

    explorer.zip

  • Size

    2.3MB

  • MD5

    31eb88c45f6c817b25c5a25d1855a542

  • SHA1

    12592743c06138173601582f05d9f306c2e8dcaa

  • SHA256

    7cae73804c2ff71229e3915e68022367dbf796ce715193e2725956df0b6b16a5

  • SHA512

    0ce1bfbf016a3f4e28f3b3d52fc30fa347499b1f4960f9e50098875fde9502309260a0c90ec79299669ff468ec0941d1e3c8cd7b54b50569fef1c11213e1b992

  • SSDEEP

    49152:EAjMmkRnXiIR4ucKowiM9aMalrZUwHMNWb0R+6D6m7/iEllGOygUHU:GP1dcZYoGwpkXD6UqHxgUHU

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with 4.0 macros.

Files

  • explorer.zip
    .zip
  • comadmin.zip
    .zip
  • MigRegDB.exe
    .exe windows x64

    8970a513038eb47c18c01c23c3893b4d


    Headers

    Imports

    Sections

  • comadmin.dll
    .dll regsvr32 windows x64

    818f0b11cbba14d2278377dfc403f423


    Headers

    Imports

    Exports

    Sections

  • comempty.dat
    .msi
  • comrepl.exe
    .exe windows x64

    5bd25a3a189a3c31323d2c02495592d7


    Headers

    Imports

    Sections

  • mtsadmin.tlb
    .dll windows x64


    Headers

    Sections

  • explorer.exe
    .exe windows x64

    d4f5dbed35754e9ab00b33c1d7392c24


    Code Sign

    Headers

    Imports

    Exports

    Sections