General

  • Target

    download (3).zip

  • Size

    926KB

  • MD5

    e50ca826c45f4cf9c23eddbc596843a9

  • SHA1

    ae1ba0a94cff95d409f73fb13d0958415ba30b39

  • SHA256

    963dc27c876eb783463a8f6e279cb01ac764b09cc252424f940c2e177d05380a

  • SHA512

    db0edcdc936435a6bf2a1a0ad886bba173054c833a6fe6a5daabb4a7e0b37d6f682b61ce085dcf17bb91cb84c4fcd2e8fb732cc4d91f829a56719c464e6c4e04

  • SSDEEP

    12288:K2j88G4TKbfgcX0ukZNQF+k0u6zKE9IUjDBBaOMX4i5pcC0DRgJcmNn4giTmQNa8:/j5T0IW0xZNG0tI+VLMLTczwcZhTJXnV

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://discord.com/api/webhooks/1128723669133295677/EHDr_fwNxuZt-8XHvWostH1rGaf6qlYkHTjvkcvLQErJJGLWEvkPRpNG7Dlce1n6_qmK

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • download (3).zip
    .zip
  • 0c6abaa28bc8f72d0ee3d270d30bf44eb1f43c52062dbb2c18e5e5f01cb4d75b
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 0e1577001fd5c5a2fe5ad9f8f88fec37caf1389dc2fd4e25c56bb7e5f426cb41
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 11b7bfb42825b0dc9a93d548b2a45cce7e75c042e244a25beea7ed584f35330c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 1e93b6a9f00cba3ee9c55c8f4d8959ea15557d0a27bd155851a2572c04a107aa
    .exe windows:6 windows x86 arch:x86

    e7d942e4587b7dcb628df7432fb00756


    Headers

    Imports

    Sections

  • 2a3da7eaae24d815a246beb194c72eacf10383e6ac3f46ef23298fb65ca10407
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 337f3638c96bc767c2b4d9cc93a5a9666c46c6d7239766d4e0621ad596b947af
    .wsf
  • 36240c19c52f31f1981a60170bb9ee9651a709d249e98b0690bb1b5422664f80
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 41a03495c132efd5412a52a16a04892c9ffe69ceb1ae4c3ae21d757ea24aec4f
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 532003b3c8b68c6b82d0731213e709bdebdd67a7836155c0a4ebdeea354cc761
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • 536c3c551b8f25e2d3c09d1528030a79547f4c919b739655c3844e25c760bfbb
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 7488e97be511f0ea554db95fd64f3c5ce9bfbe8bfab79c6ed59ca61aa1c8e9bc
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 7fcdac4d92777beb10a4d554d6842e2796c07c70a50dbe0d12808fd5fb8dbf45
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 88896499f11a35f4d4fb9ed5fe2e8c5c65ceef1fb7c3e04bdcee6551d0a2ac8e
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 8feec8ca1026ea0392b80524ace8d637b9c96ad975ead4c764c3a1401ff921de
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 911bee2e4fb60175416658e84eb11115aec7de0ad9b1eb95e3fa0dc569cc45cd
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • a2cf2ccc1d4a71ead386156b8c39a4f6240068cf9af485513284bf98662ae9b3
    .docm office2007

    ThisDocument

    UserForm1

  • acc91fccb084496ae0d0864c90d3ae99493cf638189995fb4d8d9f4ecbbf7a52
    .ps1
  • b6cbd7f5f6d9946b27be877ab5bd8205f64a4155ef202694dc2ce9fb2981c18d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bb62e9a2096bac600aca92766dd565477eccc7418e85cf7a1d21e10000cc09dc
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bf70831888dc6762f42a463a02dbf50f984c1cdf674da189fca5fafd4134ce94
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • d3a00a1101f2fa37b0b01bbee1b3c7f683ccf27fa224611721a863573d6e99da
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • d99c69e60dc4f2e2cf4268ae02d79a4e4839e160fa1d2df55e647f850607e59b
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • da7fbe88aad77aa27f268865af3def5dc1c9ab643143471ebbc28495ed8f8b99
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • e3af616583327f189f2d9e0b1c38199e1f35dda391b6a559253be0fb4410a0e9
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • eaf50200295f438f709ccbbfb4c94351503e5dbb89e4e9a2fee25abf40e2a036
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections