Overview

overview

7

Static

static

3

GMap.NET.Core.dll

windows7-x64

1

GMap.NET.Core.dll

windows10-2004-x64

1

GMap.NET.W...ms.dll

windows7-x64

1

GMap.NET.W...ms.dll

windows10-2004-x64

1

RZD_Belorusia.exe

windows7-x64

7

RZD_Belorusia.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    baza-infected.rar

  • Size

    2.0MB

  • MD5

    769855d77078e88e573532f1b99283bc

  • SHA1

    bb39f29a6ba6b1926cb449108f20c9deda1450df

  • SHA256

    19e69b0b7c432d7d4304abba75717f95291d50d0aecbb927ec6dd4667f4fba50

  • SHA512

    e1da50fe6a160e9c3daaddc15227de03ae68a03968b50fa2c801cf98bf855ca2e08f533cc7a44b494d30cdec7bfb486c8a12485f5816fa6a67775e5ff15c558e

  • SSDEEP

    49152:motuQWKz7ENFYaFFod0j7G049bmUlILHLZCkL23dKaRNEyIpupJchvYVIlLyfJce:motuQWKz7ENSqFoKj7/IWdL4dfRdMu/n

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • baza-infected.rar
    .rar
  • GMap.NET.Core.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • GMap.NET.WindowsForms.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RZD_Belorusia.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections