Overview

overview

7

Static

static

3

SETUP.bat

windows7-x64

7

SETUP.bat

windows10-2004-x64

6

UPGRADE.bat

windows7-x64

1

UPGRADE.bat

windows10-2004-x64

1

postgresql...nt.msi

windows7-x64

7

postgresql...nt.msi

windows10-2004-x64

7

postgresql-8.3.msi

windows7-x64

7

postgresql-8.3.msi

windows10-2004-x64

7

vcredist_x86.exe

windows7-x64

7

vcredist_x86.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    94f72fa2314552a95cac703e96f760d30f8443ea23d8cf0adaf35eba147c1f85.zip.zip

  • Size

    25.0MB

  • MD5

    c6d3ebe40b97a3a7c1c91b580b233c48

  • SHA1

    affc7136c633a7b864c7fcfe1f88bdf0e627d89f

  • SHA256

    5e8b94ddfbf41321f4192295a6054b04b2b42cc09f44f822ceb915b255a43122

  • SHA512

    e24839be20ed95987e0ebd7af64fc9f7fda6b8153b3411620298163d983ada70675b99e2e36a15f885d042ee460d8d1df24685366996bebd63007bc64ecd6033

  • SSDEEP

    393216:MkuLEXZnwD1IGxg1kBwvh2NCMKmTZbLB67HYYDeIRWwV0Tr5nSUjDhKNEwmOXsBB:Bo4nwgkBwAN67HYYT8Fvh/wmOU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94f72fa2314552a95cac703e96f760d30f8443ea23d8cf0adaf35eba147c1f85.zip.zip
    .zip

    Password: infected

  • 94f72fa2314552a95cac703e96f760d30f8443ea23d8cf0adaf35eba147c1f85.zip
    .zip
  • README.txt
  • SETUP.bat
  • UPGRADE.bat
  • postgresql-8.3-int.msi
    .msi
  • postgresql-8.3.msi
    .msi
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Headers

    Imports

    Sections