General

  • Target

    MDE_File_Sample_4f91d8d3d21a03b9594ec7d70bde3208d49176ad.zip

  • Size

    290KB

  • MD5

    eaa81d6003d728034d20e5d17fb00605

  • SHA1

    1de08c82a76e4f09d3760121e53fb67eef7eb954

  • SHA256

    c23e47d21f149892f986b26f7d3415a1d6ceea4467111fc4eaf514c91cda756b

  • SHA512

    67902019f4cdb3ff5da7e9ff90309b3fe97e49e925d16b3e70ce6ad6d94d829385616fe03a6e7fecb96bfac08e3ca487e5f93dc3002bbfc61fefeffcc4450752

  • SSDEEP

    6144:qyNeb4UL0tpTcveZTOlUn1JV+wJa94dNbJHnRt9sGY7URh:JUMbtpTXZTRrFkGPbJxt9K7Uf

Score
10/10

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

Files

  • MDE_File_Sample_4f91d8d3d21a03b9594ec7d70bde3208d49176ad.zip
    .zip

    Password: Cis0@2023

  • mailpv.zip
    .zip

    Password: Cis0@2023

  • mailpv.chm
    .chm
  • mailpv.exe
    .exe windows x86

    Password: Cis0@2023

    4bb731cbb501f2408ea945577453f943


    Headers

    Imports

    Sections

  • readme.txt