Resubmissions

15/05/2023, 11:29

230515-nllz4sfa85 3

15/05/2023, 11:07

230515-m8b8raad3z 10

General

  • Target

    VN5A47C5033DE383D1B898CF239AAB2C39_2022_04_12T08_19_01_2571075.rar

  • Size

    5.2MB

  • MD5

    10976818be3e1bb043e60db1b9d8a75d

  • SHA1

    b88569b3816e277d206ca96685e9e535b60e63f2

  • SHA256

    0709ad3fc66bb5d08ad8f0cf7a542366ae50439d0b52331156fe7d2480ea3f5e

  • SHA512

    01ab99a147fe1402836fa8757bc7d8e6650e5c830b4c9d3f274a94b6b9626b207ddd1d46e641aae4e37d6af9026d6584e99093db4edc503b1af7c900c45fd450

  • SSDEEP

    98304:RaDMdL8mO8HSX2Wfz1kHqaA1F5v8tHxJDqvsz+Y9PBWjVZxm37Tmh:RaDMmmtSXf71xaA50rJgjY9ZWjVg+h

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • VN5A47C5033DE383D1B898CF239AAB2C39_2022_04_12T08_19_01_2571075.rar
    .rar
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Autofills/Google_[Chrome]_Default.txt
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Cookies/Google_[Chrome]_Default Extension.txt
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Cookies/Google_[Chrome]_Default Network.txt
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Cookies/Microsoft_[Edge]_Default Network.txt
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Cookies/Steam_[htmlcache]_Unknown.txt
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/DomainDetects.txt
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Desktop.lnk
    .lnk
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Documents/DEVISE CARRASCOSA.doc
    .doc windows office2003
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Documents/Denis CARRASCOSA Releve.doc
    .doc windows office2003
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Documents/Readme.txt
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Documents/demande explication BAMBA ALY.doc
    .doc windows office2003
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Documents/demande pret traore.docx
    .docx office2007
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Documents/demission MAWOLODI.doc
    .doc windows office2003
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/FileGrabber/Users/Administrator/Documents/depart jb.doc
    .doc windows office2003
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/ImportantAutofills.txt
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/InstalledBrowsers.txt
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/InstalledSoftware.txt
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Passwords.txt
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/ProcessList.txt
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Screenshot.jpg
    .dll windows x86

    9043a0459baa7e86a8246f1ef2c4bb0d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/UserInformation.txt
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/BinanceChain(brave)/CURRENT
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/BinanceChain(brave)/MANIFEST-000001
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/BinanceChain(chrome default)/000003.log
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/BinanceChain(chrome default)/CURRENT
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/BinanceChain(chrome default)/LOG
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/BinanceChain(chrome default)/LOG.old
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/BinanceChain(chrome default)/MANIFEST-000001
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Exodus/wallet/info.seco
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Exodus/wallet/seed.seco
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Exodus/wallet/twofactor-secret.seco
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Exodus/wallet/twofactor.seco
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(brave)/000054.ldb
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(brave)/000056.ldb
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(brave)/000057.log
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(brave)/000058.ldb
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(brave)/CURRENT
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(brave)/MANIFEST-000001
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(chrome default)/000494.log
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(chrome default)/024123.ldb
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(chrome default)/024125.ldb
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(chrome default)/024126.log
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(chrome default)/024127.ldb
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(chrome default)/CURRENT
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(chrome default)/LOG
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(chrome default)/LOG.old
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(chrome default)/MANIFEST-000001
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(chrome default)/lost/000494.log
  • VN[5A47C5033DE383D1B898CF239AAB2C39] [2022-04-12T08_19_01.2571075]/Wallets/Metamask(chrome default)/lost/MANIFEST-000001