5a39f9dbd5c6cee8dce9d113c484d794045d72f3258e1959d34c14e673803260[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
5a39f9dbd5c6cee8dce9d113c484d794045d72f3258e1959d34c14e673803260.zip
Size 164KB
Sample230321-qplvmaae37
SHA256 eb508dd16e3181fcb87e35f363a62ac67c3851b414b20d7e83825733cf4dc56d
MD5 04c7a45184c4ac326d97fda239411d20
SHA1 f3b8622942897339ed4b02e33bbd6ae3196df7b6
SHA512 362d8313cf0805e8137b233dce3ec96a253f5ab3f91ee67e095f920acfdbb2acda0ecc7e20be2510704f33de9df303f0614222b6ece01a34937bb3687a32cbde
SSDEEP 3072:svVb1lXfJdrvZUX/sWuZm+sOJraBUdHdwpLL9cMGK5ShNcZOvanLcJ:sdHfHZLWybJraBUd9wpHGbW5QJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

5a39f9dbd5c6cee8dce9d113c484d794045d72f3258e1959d34c14e673803260.zip

.zip 164KB
5a39f9dbd5c6cee8dce9d113c484d794045d72f3258e1959d34c14e673803260.exe

.exe 202KB

5a39f9dbd5c6cee8dce9d113c484d794045d72f3258e1959d34c14e673803260.zip

SHA256 eb508dd16e3181fcb87e35f363a62ac67c3851b414b20d7e83825733cf4dc56d
MD5 04c7a45184c4ac326d97fda239411d20
SHA1 f3b8622942897339ed4b02e33bbd6ae3196df7b6
SHA512 362d8313cf0805e8137b233dce3ec96a253f5ab3f91ee67e095f920acfdbb2acda0ecc7e20be2510704f33de9df303f0614222b6ece01a34937bb3687a32cbde
SSDEEP 3072:svVb1lXfJdrvZUX/sWuZm+sOJraBUdHdwpLL9cMGK5ShNcZOvanLcJ:sdHfHZLWybJraBUd9wpHGbW5QJ
MD5 SHA1 SHA512 SSDEEP

Password

infected

5a39f9dbd5c6cee8dce9d113c484d794045d72f3258e1959d34c14e673803260.exe

IMPHASH 61259b55b8912888e90f516ca08dc514
SHA256 5a39f9dbd5c6cee8dce9d113c484d794045d72f3258e1959d34c14e673803260
MD5 05ca94d88d462bef2458ec93ed42df23
SHA1 bc749bbfef60caac3ae0a3b6324767532c9e43dd
SHA512 b88729322928ce573c93cfdee9979bea525902fa71c96c5f43ca2370ca3d841b4708e89b5205a4404dc9af36526e5ca8b719d08c1bfc663358b799e492efa923
SSDEEP 3072:2fY/TU9fE9PEtu9brXRHwio/QbIFBo93nmpeBTJ1N+Mmc/8CWbqQZU8hbpUVS:gYa6TrFH3kE92pe9Jx/ZWbqunhKVS
MD5 SHA1 SHA512 SSDEEP

windows x86

Password

infected

Minor OS version

Major OS version

Entry point

13888

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW