31d722331a9890b3ac394bf19fa6246397fbf79b37f23bc3fdde850afbc319ae[.]zip

General

Target
31d722331a9890b3ac394bf19fa6246397fbf79b37f23bc3fdde850afbc319ae.zip
Size 311KB
Sample230321-qq6lescf6w
SHA256 5d821761f42e09f79627e9327d1916ada95d49f8084b899e043a1a2fb39dd0c3
MD5 e8177779dcd3f2d7a383a3418ac02c38
SHA1 c1572a6cf4d75aca9217cc5840d5be6442f3afea
SHA512 a1bfb051dde8f7ceddc78baf527bae026899f934213a826abda9e1e63796455ab339b49b827a5da47fc1d0b3145362c8319d08eb8e2fc52668062e26c0b1578a
SSDEEP 6144:cYJsfTtN4o3ZI2gUu3VuO/CLWWeVudo69RwJs/7ROlCmwr0J:cB7tv3W2G3VFcWWeVs9RwJsclCmwy
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

31d722331a9890b3ac394bf19fa6246397fbf79b37f23bc3fdde850afbc319ae.zip

.zip 311KB
31d722331a9890b3ac394bf19fa6246397fbf79b37f23bc3fdde850afbc319ae.exe

.exe 396KB

31d722331a9890b3ac394bf19fa6246397fbf79b37f23bc3fdde850afbc319ae.zip

SHA256 5d821761f42e09f79627e9327d1916ada95d49f8084b899e043a1a2fb39dd0c3
MD5 e8177779dcd3f2d7a383a3418ac02c38
SHA1 c1572a6cf4d75aca9217cc5840d5be6442f3afea
SHA512 a1bfb051dde8f7ceddc78baf527bae026899f934213a826abda9e1e63796455ab339b49b827a5da47fc1d0b3145362c8319d08eb8e2fc52668062e26c0b1578a
SSDEEP 6144:cYJsfTtN4o3ZI2gUu3VuO/CLWWeVudo69RwJs/7ROlCmwr0J:cB7tv3W2G3VFcWWeVs9RwJsclCmwy
MD5 SHA1 SHA512 SSDEEP

Password

infected

31d722331a9890b3ac394bf19fa6246397fbf79b37f23bc3fdde850afbc319ae.exe

IMPHASH 3ad97f4e43892433cafc01e0293aa96f
SHA256 31d722331a9890b3ac394bf19fa6246397fbf79b37f23bc3fdde850afbc319ae
MD5 f6f84e80684195be3d018d72f0c337e4
SHA1 71edaeb2a19028b2dc74f66b27245ac8ada88117
SHA512 bf4dfaa3fe983d9cecc0da761f5b49416f604774509f38a6b6a29eff4e0baef9bae5f0a601e5cfdcb15b5d1aee83822309ec2fb27ce92ab0abaaf81c3366046a
SSDEEP 6144:OwLUCKwEscIr5CAM13HfyTlJRAOvS8YGuz2ewEMXqaMM+k:pgCKwEscIr1Q/utbKmewEMXd5+k
MD5 SHA1 SHA512 SSDEEP

windows x86

Password

infected

Minor OS version

Major OS version

Entry point

15900

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExA RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathA CopyFileExW CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW DebugActiveProcess GetConsoleMode FindFirstVolumeA LocalFree LocalFlags InterlockedIncrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW EnumDateFormatsW OpenJobObjectA GetPrivateProfileIntA _lread SetVolumeMountPointW GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA GetLogicalDriveStringsA SetEvent MoveFileExW OpenMutexA FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA EnumResourceLanguagesW InterlockedCompareExchange FreeEnvironmentStringsA InterlockedExchangeAdd GetModuleHandleW GetTickCount GetLogicalDrives CreateActCtxA LoadLibraryA GetLastError WideCharToMultiByte HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

winhttp

WinHttpWriteData

Sharing