Overview

overview

7

Static

static

7

D4s.exe

windows7-x64

1

D4s.exe

windows10-2004-x64

1

KI2005.exe

windows7-x64

7

KI2005.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    10506231655.zip

  • Size

    4.8MB

  • MD5

    cabd3f1f10906c3360e1e1073ae82065

  • SHA1

    c6138ae6a150f3d3f1fc6c3cc4f49293dc6a6787

  • SHA256

    764c482a88678e293f485cb9a856f751af17f724a96cc888e754e0ba0b762d67

  • SHA512

    8fc5d6c0c6d7c0ce2d36b1c4e343b7ef5089316178a57aee828ac165e0fcf8d367c1cadd9ccad66261dd8290c864983ddb11c7412e609db07044f4845165a123

  • SSDEEP

    98304:sI0gAxFrMtQnzqBFVsFHp8uEoWnKuzP6xfS0G/LrpDkcuO:agmrMt7FVsFHXLqCxfhGnxkFO

Score
7/10
aspackv2upx

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 10506231655.zip
    .zip

    Password: infected

  • 9153636a762c320ab890133647c879758f5b322cb55a85437811b4c470a487e6
    .rar
  • D4s.exe
    .exe windows x86


    Headers

    Sections

  • KI2005.EXE
    .exe windows x86


    Headers

    Sections

  • reedme.txt
  • БОНУС/1.jpg
    .jpg
  • БОНУС/10.JPG
    .jpg
  • БОНУС/2.JPG
    .jpg
  • БОНУС/3.JPG
    .jpg
  • БОНУС/4.JPG
    .jpg
  • БОНУС/5.JPG
    .jpg
  • БОНУС/6.JPG
    .jpg
  • БОНУС/7.JPG
    .jpg
  • БОНУС/8.jpg
    .jpg
  • БОНУС/9.JPG
    .jpg