Resubmissions

19/08/2023, 12:27

230819-pmta9abc6v 3

19/08/2023, 12:20

230819-phstxsbb9x 7

General

  • Target

    MDE_File_Sample_5987967375b4c8536e0c0041d4d86b12b6dad384fcbda514b509aebfbcfcab76.zip

  • Size

    2.3MB

  • MD5

    02fdc9c964fd5df78a3dcee03aa5d260

  • SHA1

    25e64959956873ab939216dd62d3b27d9650558a

  • SHA256

    e85837901e309b8c92ae41a10bc74963c4be6876e2d5f85db37f81af04219ba6

  • SHA512

    e18a0396db0561f3bcc5cac5013de1014d6cfb43a575d7ad7e67ca0e8284101e73c540c93dec51246d983e2339267234413bceb1cc1e3dfd2583a38385804bdf

  • SSDEEP

    49152:OYD1dgs8tz6vsJzAalJf1+McewJQ/Ho4YTV7cJa+CjnkzIPb+etfzraGuQfkslxI:O6kevsJz1r+UWQf0TVca9n64bNreefkx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MDE_File_Sample_5987967375b4c8536e0c0041d4d86b12b6dad384fcbda514b509aebfbcfcab76.zip
    .zip

    Password: infected

  • Defender detected and quarantined 'Trojan:Win32/Sabsik.TE.A!ml' in file '{BDFD807B-760E-4798-BF92-B59E4454C845}.exe', preventing attempted modification by 'svchost.exe'
    .exe windows x64

    Password: infected

    4b8e9d991218cd4956b8c03decf3d546


    Headers

    Imports

    Sections