Behavioral task
behavioral1
Sample
LZHUF.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
LZHUF.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
STxt file creator.exe
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
STxt file creator.exe
Resource
win10v2004-20231023-en
General
-
Target
0329dd6929ab62cc6512ca7dfd3c9e3cb2e5a1963e1f75fa1185609020ac01f8.zip.zip
-
Size
224KB
-
MD5
260de7ff219f56b9773d4ccf8e506922
-
SHA1
1f5e775029f79b1d5b0cd86eaed6c89dfd5e7930
-
SHA256
061db8ab447e9f9cb0bdc25daa03dbac2fe17f571df3e0bed057c354b2faacc4
-
SHA512
74801d37fe6db19201af85b8df8551aa5289964dfc123ea6fa44daa9b8474792386f22c8064fc7118aaee5c11b5eccba979b114d91377d669d52fd8069c96e6d
-
SSDEEP
3072:x5a1ZvIy8juE529dYQUPOkgjCKh93d/X7Ci6L7gVQttPuqMjnS9W7mR0MNmqikd7:jaZhE527DJj+K/d/ui0gWTPRenSm3aV
Malware Config
Signatures
-
resource yara_rule static1/unpack002/STxt file creator.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/STxt file creator.exe
Files
-
0329dd6929ab62cc6512ca7dfd3c9e3cb2e5a1963e1f75fa1185609020ac01f8.zip.zip.zip
Password: infected
-
0329dd6929ab62cc6512ca7dfd3c9e3cb2e5a1963e1f75fa1185609020ac01f8.zip.zip
-
LZHUF.EXE
-
STxt file creator.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE