General

  • Target

    97b79c84a7ef9ba88708ffffab269e9504838adb8f0706f0fedaed416107cd12

  • Size

    581KB

  • MD5

    ea0a6b16942433391e25988ec0bd62dd

  • SHA1

    56365baf672074757ffacefe205530100a710d2d

  • SHA256

    97b79c84a7ef9ba88708ffffab269e9504838adb8f0706f0fedaed416107cd12

  • SHA512

    3278aae2eb779ba6d0081f394e623b7c12137f66bdf2bd2b01e1d5ae2b08f033b482b6b56d91ff3af6249e3ea0d7285473fc7fc95ca709b1ccb3b95578214869

  • SSDEEP

    12288:YG/N+6M8PsTqbFss6mBtLY9v3ReI1NiiD+rcWiKuVIs8:YGl+6M8PZdAvhe8siDFZVIs8

Score
10/10

Malware Config

Signatures

  • Detect PureLogs payload 1 IoCs
  • Purelogs family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 97b79c84a7ef9ba88708ffffab269e9504838adb8f0706f0fedaed416107cd12
    .zip
  • Shipping Document TS-5233/Shipping Document TS-5233.PDF.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections