Overview
overview
6Static
static
3b3ce44c2ef...4b.eml
windows7-x64
5b3ce44c2ef...4b.eml
windows10-2004-x64
3Pekao Potw...379.gz
windows7-x64
3Pekao Potw...379.gz
windows10-2004-x64
3Pekao Potw...79.tar
windows7-x64
3Pekao Potw...79.tar
windows10-2004-x64
3Pekao Potw...79.exe
windows7-x64
1Pekao Potw...79.exe
windows10-2004-x64
6Static task
static1
Behavioral task
behavioral1
Sample
b3ce44c2ef637ac795abb643543bccc81857dd7aa5b77867790cbed3f474804b.eml
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
b3ce44c2ef637ac795abb643543bccc81857dd7aa5b77867790cbed3f474804b.eml
Resource
win10v2004-20230621-en
Behavioral task
behavioral3
Sample
Pekao Potwierdzenie przelewu platnosci EU81900004644379.gz
Resource
win7-20230621-en
Behavioral task
behavioral4
Sample
Pekao Potwierdzenie przelewu platnosci EU81900004644379.gz
Resource
win10v2004-20230621-en
Behavioral task
behavioral5
Sample
Pekao Potwierdzenie przelewu platnosci EU81900004644379.tar
Resource
win7-20230621-en
Behavioral task
behavioral6
Sample
Pekao Potwierdzenie przelewu platnosci EU81900004644379.tar
Resource
win10v2004-20230621-en
Behavioral task
behavioral7
Sample
Pekao Potwierdzenie przelewu platnosci EU81900004644379.exe
Resource
win7-20230621-en
Behavioral task
behavioral8
Sample
Pekao Potwierdzenie przelewu platnosci EU81900004644379.exe
Resource
win10v2004-20230621-en
General
-
Target
b3ce44c2ef637ac795abb643543bccc81857dd7aa5b77867790cbed3f474804b
-
Size
691KB
-
MD5
679b85d7b93b56dee171fed93a8c1fe2
-
SHA1
18edeb77d1c59d6b0764a6f6e8c786fa857b33ea
-
SHA256
b3ce44c2ef637ac795abb643543bccc81857dd7aa5b77867790cbed3f474804b
-
SHA512
e61b8d92fb56ee5515cf1711a059ebc1938e12b11d17f51d2a2414bf67d2420c64552222d064e230438bf2172f419c8277690623dcf885db0baef3e608f13eb4
-
SSDEEP
12288:P0Ge7KZxgK9buFJGNZljxn4099KILdoOAimF6HsYee3ImnOBOB:OEp9XNln4GhmKmFkPeZ5MB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/Pekao Potwierdzenie przelewu platnosci EU81900004644379.exe
Files
-
b3ce44c2ef637ac795abb643543bccc81857dd7aa5b77867790cbed3f474804b.eml .wsf
-
http://www.pekao.com.pl
-
-
Pek-pl1.jpg.jpg
-
Pekao Potwierdzenie przelewu platnosci EU81900004644379.tgz.gz
-
Pekao Potwierdzenie przelewu platnosci EU81900004644379.tgz.tar
-
Pekao Potwierdzenie przelewu platnosci EU81900004644379.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
email-html-2.txt.html
-
email-plain-1.txt
-
pek-pl2.jpg.jpg