General

  • Target

    privat.zip

  • Size

    1.5MB

  • MD5

    7a3c4a3dfbd3fde1e80249f36fa5ad7d

  • SHA1

    ad8732fe9705005583dedfb15cfb99e41ff0ee78

  • SHA256

    182846635a23b16250ddf673b15dc1caaf09375e6642dbdceac11e323f7f13b5

  • SHA512

    b182bd264c6068cc84d92246c4c75843b67f5ca6e0fcf8ca139c03792c02eb48b8803807798044f6a5aa3f58166429e3035974143a2d4409f0684ee03d2d58b9

  • SSDEEP

    49152:YMZGksknnz0EeBeTrSB0HXhoIJNjIr8m2p:YMoGz0E4A2B0HX3jI52p

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • privat.zip
    .zip

    Password: 2115

  • ReadMe!!!.txt
  • other.dll
    .dll windows x64

    Password: 2115

    4c74380b450a7a0ff4d566f16a86ccb8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • platforms/qwindows.dll
    .dll windows x86

    Password: 2115

    9d6607e0bc6f62711cae201eebf31e8b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • startup.exe
    .exe windows x86

    Password: 2115

    4170fdb8933a7ec27e3266f6fc460d37


    Headers

    Imports

    Sections

  • translations_64/qt_ca.qm
  • translations_64/qt_cs.qm
  • translations_64/qt_de.qm
  • translations_64/qt_en.qm
  • translations_64/qt_fi.qm
  • translations_64/qt_fr.qm
  • translations_64/qt_he.qm
  • translations_64/qt_hu.qm
  • translations_64/qt_it.qm
  • translations_64/qt_ja.qm
  • translations_64/qt_ko.qm
  • translations_64/qt_lv.qm
  • translations_64/qt_ru.qm
  • translations_64/qt_sk.qm
  • translations_64/qt_uk.qm
  • vcruntime140.dll
    .dll windows x64

    Password: 2115

    f143e2868efde0fcb493bd3051708a62


    Code Sign

    Headers

    Imports

    Exports

    Sections