General

  • Target

    INV_Scan_32.zip

  • Size

    518KB

  • MD5

    3e9c64bb43373f42d7578678b76fb2f9

  • SHA1

    c1f259f72a84c79fbd04a86f119925a176602a2c

  • SHA256

    5f69e700adcba2984bc3708a55cd75f19b0d79d251e4f0e2c0d1164444160a11

  • SHA512

    2e6ace92eb4d16dbe9e02b9c5ae338f8e8fc061acb55d212297f832b12c31e45214e256ad91db80354e7a5582f6228798cb1f4734d3ec83b801aa9a887e70d53

  • SSDEEP

    12288:vyKu+sNDbIeAbJ3WslEOWMnlhx6acczLN3GGQhlHRK:qKspjAYCzWuh0aJ3glHRK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • INV_Scan_32.zip
    .zip

    Password: 84925

  • INV_Scan_32.IMG
    .iso

    Password: 84925

  • OBSESSOR/SUNLANDS.CMD
  • OBSESSOR/WOOZIEST.DAT
    .dll windows x64

    Password: 84925

    461b78f28d3ea5be2e2ffd3133d46dd3


    Headers

    Imports

    Exports

    Sections

  • VANDALIC.LNK
    .lnk