General

  • Target

    11998669374.zip

  • Size

    300KB

  • MD5

    29f487e3f734190c8672209bcf997e29

  • SHA1

    3c215e27531308edd9c02ab4d8315ee2e45a770f

  • SHA256

    9b1db1e91a89dbca9fd67f2796c1fd46111381a98c661382a25186d0c870bfde

  • SHA512

    63b715c6d3acc2f794aa729c8de2a52d7aea38a5f793fc944528795d25442d95834397748b4091a872a61f71138352a536d2668d7631852c6f5314ca34e1cc84

  • SSDEEP

    6144:ZX31Uo70eSC2C5tD/IO4nGex3HnA4UmxmVQs3TqSbggcwy0tPtzvyoa:Z31SqxXD/CnPNHzHxmz32puy0tFzvla

Score
10/10

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 11998669374.zip
    .zip

    Password: infected

  • 6e4fa5f776b899d3d3d0cc1da69ff6165aefafd46f70ddb55399c73ba6f965cd
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections