Overview

overview

3

Static

static

3

1-mfemms.exe

windows7-x64

1

1-mfemms.exe

windows10-2004-x64

1

2-Protection.mof

windows7-x64

3

2-Protection.mof

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PerfLogs (2).zip

  • Size

    1.7MB

  • MD5

    1299f0c11d924970beaae4cc2102fba8

  • SHA1

    9a8adf488313ac0513fc1636e8230f4987ea609c

  • SHA256

    1948fa9631d28f672ba3a052efb5ffd5ced46cf8cd3f07e32a79fdd6675c6491

  • SHA512

    73ecac3af8d904cf8cbbd21c32a149802f084a4bbc89fdee265081f49d76e42d5d0bda94e0a8b202c80c3dafa8f04317ee3dedfbe5407e205a31455149111799

  • SSDEEP

    49152:tJpJPtOIpg05OSoWz6T/rGAnJo1ByjY0NC2:31Oog0MKQvnO/D0X

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • PerfLogs (2).zip
    .zip
  • 0-spoolsv.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 1-mfemms.exe
    .exe windows x64

    d7afd3b1ecf18f944c94ad097dda6007


    Headers

    Imports

    Sections

  • 2-Protection.mof