Overview

overview

3

Static

static

3

tools/1.exe

windows7-x64

1

tools/1.exe

windows10-2004-x64

1

tools/local.exe

windows7-x64

1

tools/local.exe

windows10-2004-x64

1

tools/staging.exe

windows7-x64

1

tools/staging.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    tools.7z

  • Size

    6.4MB

  • MD5

    e11510adf8d517d2e1f89bf40262db6e

  • SHA1

    c75ba2d5f5470b841996416628eb6609097adc64

  • SHA256

    80920b981adc8e18bb72500a27007e63f7a975e838fbff64b02d9fcbed9a9068

  • SHA512

    5819bb087a53a0756de800b9ff8d87a8d2b0551139a833c231506677591053a50d1c9f997d304391cd5297955c2799bbe5e68c3be5b69e5ae7de61603334f70e

  • SSDEEP

    196608:2HY3JylZwx3fvA8CQ43lVQqM+4W9gfxia:hZyLwxArlKp+Iia

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • tools.7z
    .7z

    Password: infected

  • tools/1.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    acc4c8794a0a85da871307b47dd9a48c


    Code Sign

    Headers

    Imports

    Sections

  • tools/local.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    993b27f3d24d69440d8c9819308a27b9


    Headers

    Imports

    Sections

  • tools/staging.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections