General

  • Target

    9c286caca7dd6dbac3a43b050c356fb9

  • Size

    1.1MB

  • MD5

    9c286caca7dd6dbac3a43b050c356fb9

  • SHA1

    75b9a42b3438b2bfd5dc32cd7ff03131b0a56bed

  • SHA256

    02ab3ac8ed290cac44ffd10028583da6e73fe7b12b61d0529b45ddca29be00f3

  • SHA512

    fd8316ec6370b8891a5bd38aef5aff009f44250cbe7de9f1474820a3b8b1398002b935cd90bc6ed1a1005dc2d4043ccc110307a75a6fb06eb856314b484a3a2b

  • SSDEEP

    24576:Z2LsgM+XQEGNX/czlxnmj6kQcJpSfCvKevyaUTMxnwpnpY7ib3P:D/+Xm/0Jm+kPvBy5xzgib3P

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c286caca7dd6dbac3a43b050c356fb9
    .rar
  • bif5.exe
    .exe windows:4 windows x86 arch:x86

    8afbf9211984274dc7a21b630ecae242


    Headers

    Imports

    Sections

  • cf.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • gezi0203.exe
    .exe windows:0 windows x86 arch:x86


    Headers

    Sections

  • ring.vbs
    .vbs