Static task
static1
Behavioral task
behavioral1
Sample
SKGTM_5400000000000000000000024323442422023.exe
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
SKGTM_5400000000000000000000024323442422023.exe
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral3
Sample
SKGTM_5400000000000000000000024323442422023.exe
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral4
Sample
SKGTM_5400000000000000000000024323442422023.exe
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral5
Sample
SKGTM_5400000000000000000000024323442422023.exe
Resource
debian9-mipsel-en-20211208
General
-
Target
posible phishing FWDRV Información importante.msg
-
Size
101KB
-
MD5
995d8198bf6f50e4d53051cc4ca6406b
-
SHA1
f785e61b2e5a529b2474308e116fce31fd9d810a
-
SHA256
d921f4c28ea9b483804c2a66b15e59e55cbd844498aea59fbd6663e4b67f12d2
-
SHA512
bf1cff0f0633f57d57b98669483c1f8c289b864c3df57202ca4e93b17bd602bc9e65f119286f98855bdbdc42037e566726e2b7ef4fdb8eb835486857a8862aa4
-
SSDEEP
1536:/x4WxqNHrHMMpYy7k3Y/etHzyj4/BOoC5/0Xyp7nO0AhIuwwB:5DUpp7g3Y8TygBUR0XypzO0Luww
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/SKGTM_5400000000000000000000024323442422023.exe
Files
-
posible phishing FWDRV Información importante.msg.msg
-
http://sam-home.com
-
-
0e0d4f45.png.png
-
SKGTM_5400000000000000000000024323442422023.gz.rar
-
SKGTM_5400000000000000000000024323442422023.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ