General
-
Target
11111956896.zip
-
Size
4.4MB
-
MD5
cefa9f40061da64475cc49d49ccfd9d3
-
SHA1
50d19b0c1648991b7d50cc53def2c22c8b3d3977
-
SHA256
78ab77661ceabd695c6c12ec32ab4a112114ec96ba8aec09f8b52337a71bd798
-
SHA512
1b29d570f9cd6129dd59f93ccb1132e0472d23edef69e99bbf4b73b56830512e6984b86f3d6ffc41b3c79365be2f6bf504fbad16313439c5729c181dc75f2689
-
SSDEEP
98304:0CWzukCy6x2zgqKrEoVHEbvTx2nz5emEINGZEirxlH/f1:XWDOFqK9EbvTxgz5e72ir/1
Score
10/10
Malware Config
Signatures
-
Amadey family
-
Detect Amadey credential stealer module 1 IoCs
-
Detected Mount Locker ransomware 1 IoCs
-
Detected SUNBURST backdoor 1 IoCs
SUNBURST is a backdoor for the SolarWinds Orion platform with extensive capabilities.
-
Growtopia family
-
Mountlocker family
-
Sunburst family
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
11111956896.zip
Password: infected
-
1ea570b62dc7c7fe52ff5655217ec452004d899b7a907b7838489869b7422867
Headers
Sections