infected[.]zip | Triage™

General

Target
infected.zip
Size 355KB
Sample231002-rhp45sbd41
SHA256 b0b60edfdd8a95dd2fd955e4966ebb6b9c9b68a4f08bd4857b20077340bccffd
MD5 f18f0aaa1333dbead1be24122ea7aef4
SHA1 0346c518ae5761b531f0b35ab796254ded5331e3
SHA512 b79008968d8fc00689ee78a36d61cec22ceb234009686cd6364545eb2ff3919a68bd60392ea3dd42b80d1a1842f6b60d2c5383bab991c6a355b6d01e8d6982ae
SSDEEP 6144:1ic3Z72fheFd3QZbdXyPIIoZyroT7PY0OcxOyYzGB6B0kQDM3aT:1ic3d2JeFd3QZMPIRYhMwLg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/97da8493ed1dd6663f1d7bb1d030fe08d5cf207d7cbb6363cbeca31ba39fe1a6

File Explorer

infected.zip

.zip 355KB
12134767926.zip

.zip 355KB
97da8493ed1dd6663f1d7bb1d030fe08d5cf207d7cbb6363cbeca31ba39fe1a6

.exe 408KB

infected.zip

SHA256 b0b60edfdd8a95dd2fd955e4966ebb6b9c9b68a4f08bd4857b20077340bccffd
MD5 f18f0aaa1333dbead1be24122ea7aef4
SHA1 0346c518ae5761b531f0b35ab796254ded5331e3
SHA512 b79008968d8fc00689ee78a36d61cec22ceb234009686cd6364545eb2ff3919a68bd60392ea3dd42b80d1a1842f6b60d2c5383bab991c6a355b6d01e8d6982ae
SSDEEP 6144:1ic3Z72fheFd3QZbdXyPIIoZyroT7PY0OcxOyYzGB6B0kQDM3aT:1ic3d2JeFd3QZMPIRYhMwLg
MD5 SHA1 SHA512 SSDEEP

Password

infected

97da8493ed1dd6663f1d7bb1d030fe08d5cf207d7cbb6363cbeca31ba39fe1a6

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 97da8493ed1dd6663f1d7bb1d030fe08d5cf207d7cbb6363cbeca31ba39fe1a6
MD5 6f4a0036283e3e6b5b2350315de76ec7
SHA1 a61a57632e3482a0787f756801593d0d3f9c19d4
SHA512 7109c2f10b19081a0ad1a84bc92cab1ec7f1dcf4427507755285a3bcf075c11f3c20e670ff7f7d99176353e8f812677ffbadce4c0895387c104eee9ae6e16e16
SSDEEP 6144:8lvfbcwAriyl/AEymWTzFj6Q62U/u24ERbzJP8CeATYA0coc6b60ttVy:8lvYidEymWTQQc/J4EpzJH/Qtb60V
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

358818

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing