Overview

overview

10

Static

static

10

18f79ddfd5...6d.exe

windows7-x64

10

18f79ddfd5...6d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18f79ddfd56e5beb86dfdd7cf7dfa8a72be614c2a434cd8327a7a487272b1a6d.exe.zip

  • Size

    302KB

  • MD5

    74966cdb57c3a98130afe940061d2bec

  • SHA1

    807de3d274204af41be13da2a124acd622076a56

  • SHA256

    c9a312abbd66dde9695cdbc60963b2dd16289538289ba9af0a8d9e2e9c809f71

  • SHA512

    bfc393819088b8ed2c0354bf50e985e493347e5af3d33cc5d137913043f75c6b478b0df6c652ff85faba9b2b7283b2b02adc4fadd9e854e3f5fdf9b0657805f9

  • SSDEEP

    6144:NSE5Tr2uyk1gcBsKKm6lvoHqbe0VCdqEPvd9R6kc+p7mSn8+4WK:NFjyk1BiKru20VCME3d2EmKR4h

Score
10/10

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 18f79ddfd56e5beb86dfdd7cf7dfa8a72be614c2a434cd8327a7a487272b1a6d.exe.zip
    .zip

    Password: infected

  • 18f79ddfd56e5beb86dfdd7cf7dfa8a72be614c2a434cd8327a7a487272b1a6d.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections