Resubmissions

26/01/2024, 19:41

240126-yeacvadaf9 7

26/01/2024, 16:31

240126-t1m4lshge2 3

26/01/2024, 16:13

240126-tpggpaahfl 7

General

  • Target

    14547527485.zip

  • Size

    7.2MB

  • MD5

    86c27b0a55465bbb4a581febaca36036

  • SHA1

    156f132aa2d9e8f7730e85cc5377aed7be14b703

  • SHA256

    8a43b9adfd437c627e3a047297bf9042529a9352e9eedad3dc216f41e3c228fb

  • SHA512

    9c7afae820cb771d3282a7b3c90fbe7c7fb227e21e4b9f66c08752d434f7d5e4bf41578db77f51274dd5fcc25c2a9d370e3e07db99408a0d55ca2a164c96dde5

  • SSDEEP

    98304:GTbLr+ckQhbbZgMtmf4dSTrkTkkgrX1k7oWTJ0E4f6FPnE+xbTQLtmznjJW:UXlh3+8QQBTJ0ELFPE4bTQAo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 14547527485.zip
    .zip

    Password: infected

  • 113c9e7760da82261d77426d9c41bc108866c45947111dbae5cd3093d69e0f1d
    .dll windows:6 windows x64 arch:x64

    Password: infected

    7d011c3a5c476597aaa31e8a9fff1f97


    Headers

    Imports

    Exports

    Sections

  • 3dffb7f05788d981efb12013d7fadf74fdf8f39fa74f04f72be482847c470a53
    .dll windows:5 windows x64 arch:x64

    Password: infected

    04a2de43d6724a1a52ec06f045f88902


    Headers

    Imports

    Exports

    Sections

  • 98ec46ac0e3b0b49140f710d0437e03e1f89f9b6fc092be7a5a1fde7d59e312e
    .elf linux x64
  • b9e313e08b49d8d2ffe44cb6ec2192ee3a1c97b57c56f024c17d44db042fb9eb
    .dll windows:10 windows x64 arch:x64

    Password: infected

    05d1938ad4ce929f3eca1814b2c87ed7


    Headers

    Imports

    Exports

    Sections

  • be4334ce0be2683878c5b9fb911a4fb9beaaa09845028215134081268621df38
    .rar

    Password: infected

  • usersfiles/META-INF/MANIFEST.MF
  • usersfiles/WEB-INF/classes/com/ilient/server/UserEntry.class
  • usersfiles/WEB-INF/lib/gson-2.8.6.jar
    .jar
  • usersfiles/WEB-INF/web.xml
    .xml
  • usersfiles/user.bin
  • usersfiles/user.exe
    .exe windows:5 windows x64 arch:x64

    Password: infected

    06ed791760f01a9818957f0234599d87


    Headers

    Imports

    Sections

  • d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0
    .elf linux x64
  • d3eab2a134e7bd3f2e8767a6285b38d19cd3df421e8af336a7852b74f194802c
    .dll windows:4 windows x64 arch:x64

    Password: infected

    dce96bc6319a78e5eaf9315128c98209


    Headers

    Imports

    Exports

    Sections

  • ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815
    .elf linux x64