General

  • Target

    14470108493.zip

  • Size

    800KB

  • MD5

    1bff30dbb9b71fbce73297725dc950e6

  • SHA1

    e82d3709d8950365ad58b53220a7c0870afa5fbf

  • SHA256

    d211189ca1b4271d67e739b22a4ecef13db50e74e6bfe950046ce0410c4c4e2f

  • SHA512

    ac650249754428bd3cc62af1098a0e32609a6bb290f80bb95f79f37feaf760ca50fbf9a018d41c9dd06dc78b3d5f1b2b160646e97a9d4cbb0e0511eb5312d00f

  • SSDEEP

    24576:+UrSMgSGZ7WkDn3ZA6jXDSlgoh6leHuYDxJh8ICTCes:gDNDnJNjXe2iaeHukh8IB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 14470108493.zip
    .zip

    Password: infected

  • 58947d908f1aa87d7b81cb0a2bcf375bb83e8e761e3bcb1c17a8c1e3f02bd1cf
    .zip
  • ScheduleTime_80.contrast-black.png
    .png
  • ScheduleTime_80.png
    .png
  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • scrobj.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    32db9ef89a16161ca4fb3f91cb275afd


    Headers

    Imports

    Exports

    Sections

  • sdcpl.dll
    .dll windows:10 windows x64 arch:x64

    d57ef3bfda442f0bc89cdecd7f5cbf37


    Headers

    Imports

    Exports

    Sections

  • tcctl32.dll
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections