Overview

overview

7

Static

static

3

IHS-H-A-V0...le.exe

windows7-x64

7

IHS-H-A-V0...le.exe

windows10-2004-x64

7

IHS-H-A-V0...pl.htm

windows7-x64

1

IHS-H-A-V0...pl.htm

windows10-2004-x64

1

IHS-H-A-V0..._c.htm

windows7-x64

1

IHS-H-A-V0..._c.htm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    IHS-H-A-V003-Exploits.zip

  • Size

    194KB

  • MD5

    9d08ed0af3b70cd4fa0858698071c7d6

  • SHA1

    3382cbd7fc79dc6263dea66a826cdcfc55122647

  • SHA256

    7f3b108796351c5e12d590fe0659c69352ec2d6d85df8cfe9737ad77e81bcb93

  • SHA512

    657ecfbee8340df59f204b2907f3d78e97d06d5448e560da35b9957acfc55de6cf56c9c8ddfc104ec7d517d02126c4dacab82e7d6e78e964d4290795c52f9f35

  • SSDEEP

    6144:V9nUJ9mR2z60Wy5qP67InIlkaGHPJVYnj82xn:V9U/U2z696lT2HSg2xn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • IHS-H-A-V003-Exploits.zip
    .zip

    Password: infected

  • IHS-H-A-V003-Exploits/Ciamos Highlight.PHP File Disclosure Vulnerability Exploit.txt
  • IHS-H-A-V003-Exploits/CzarNews Remote File Include Vulnerability Exploit.txt
  • IHS-H-A-V003-Exploits/Exoops Highlight.PHP File Disclosure Vulnerability Exploit.txt
  • IHS-H-A-V003-Exploits/Icecast XSL Parser Multiple Vulnerabilities Exploit.txt
  • IHS-H-A-V003-Exploits/Invision Power Board HTML Injection Vulnerability Exploit.txt
  • IHS-H-A-V003-Exploits/Microsoft Windows Local Denial Of Service Vulnerability Exploit.txt
  • IHS-H-A-V003-Exploits/OllyHole.exe
    .exe windows x86

    Password: infected

    c0cbae03271cea218ffa837c42bdd54d


    Headers

    Imports

    Exports

    Sections

  • IHS-H-A-V003-Exploits/PHPMyFamily Multiple SQL Injection Vulnerabilities Exploit.txt
  • IHS-H-A-V003-Exploits/RunCMS Database Configuration Information Disclosure Vulnerability Exploit.txt
  • IHS-H-A-V003-Exploits/TRG News Script Remote File Include Vulnerability Exploit.txt
  • IHS-H-A-V003-Exploits/funlabsboom/funlabsboom.c
  • IHS-H-A-V003-Exploits/funlabsboom/winerr.h
  • IHS-H-A-V003-Exploits/ocean_poc_pl.htm
  • IHS-H-A-V003-Exploits/xosx-cf_c.htm