General

  • Target

    get.zip.zip

  • Size

    2.6MB

  • MD5

    4e519373476325eb536d61750c1c5aca

  • SHA1

    5b98db8e9a55dded9e4ce2bf6922127b90743c78

  • SHA256

    40e30c38e66740202f3a01f90c3d6fc34efd609e247f20dfcd23a6a3f2dabf97

  • SHA512

    e8fa301d139e9265e517ec2da64ee2c9017b93491af8bbeb5c4656be7ec51bd1f1b12e52d78c878b6563114df52bd08b3d36854a9f79c78fd434f3d81ee9b160

  • SSDEEP

    49152:xb8Lr50JAJ7sqWTaGJWD700vC2KXOp65q84Pl1iC9mVkceDxCptknx:ar5D7aTJW1C2KXOp6TVIGsx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • get.zip.zip
    .zip

    Password: infected

  • get.zip
    .zip

    Password: infected

  • freebl3.dll
    .dll windows x86

    Password: infected

    f781fa19ee3108d3fcdb3967b70bbdf5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mozglue.dll
    .dll windows x86

    Password: infected

    c190cce47c6cbf1ec0a59ffd2965da30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows x86

    Password: infected

    6dbd7763e94344402d4206b7bab40e1f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nss3.dll
    .dll windows x86

    Password: infected

    91b2deacd206ef373baa926022d03ae2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • softokn3.dll
    .dll windows x86

    Password: infected

    32ef7516974ac0c43943c0635266c6fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqlite3.dll
    .dll windows x86

    Password: infected

    e727d00364cd87d72f56e7ba919d1d40


    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows x86

    Password: infected

    6a84b7445ccacd5d29ac27de2745f356


    Code Sign

    Headers

    Imports

    Exports

    Sections