ValosploitV3_Installer[.]zip

General

Target
ValosploitV3_Installer.zip
Size 12.6MB
Sample240220-w1b3fsdd62
SHA256 f7ba1f62f5168638cbe3ccf0df5af38f68b55962ea3a639f6d0e2a464ab180a0
MD5 4008fea604e2ccd3a3bf5383c7777206
SHA1 6dbe00645d5d782ef8925fc00635b67ce49e69d0
SHA512 5ca41c7f3f0c567346bbee4ff08b5fb4a5889c6d8c002627b8d8199583fdd229421f3c394135ffb635980501e689ce16ad92fa3d6ab40f6e3c9d00339a95d198
SSDEEP 393216:JYbAEUpJZ++WgSt3LvPGLS+uWJZS0bFm4Q1YxN75jakmYQHR2:JYb+pJ1St3buNuWjS0bFpqYjtmR2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ValosploitV3_Installer/Installer.exe

File Explorer

ValosploitV3_Installer.zip

.zip 12.6MB
ValosploitV3_Installer/Installer.exe

.exe 12.6MB

ValosploitV3_Installer.zip

SHA256 f7ba1f62f5168638cbe3ccf0df5af38f68b55962ea3a639f6d0e2a464ab180a0
MD5 4008fea604e2ccd3a3bf5383c7777206
SHA1 6dbe00645d5d782ef8925fc00635b67ce49e69d0
SHA512 5ca41c7f3f0c567346bbee4ff08b5fb4a5889c6d8c002627b8d8199583fdd229421f3c394135ffb635980501e689ce16ad92fa3d6ab40f6e3c9d00339a95d198
SSDEEP 393216:JYbAEUpJZ++WgSt3LvPGLS+uWJZS0bFm4Q1YxN75jakmYQHR2:JYb+pJ1St3buNuWjS0bFpqYjtmR2
MD5 SHA1 SHA512 SSDEEP

Password

2023

ValosploitV3_Installer/Installer.exe

IMPHASH 6f462fcc6b830b77fb3fef2add9dc570
SHA256 817cac7fcfdc0f48444c45be772997707761e2ca1e43e8d53f8f7e0e7a1e42b0
MD5 e560d8abab1b94fa698c5164b10c4fa5
SHA1 7b7e2334f06610ebcb9ac796c471961df6a6c377
SHA512 cc546819fbf9cb40c8bd7c9f686b2d7e189b624fc94a8075e0a43ebcf83d28ed4fc51227c3450e94de91e2c72ce6ce68d7f5e6f8e9e390406da4bcc32470af16
SSDEEP 196608:MgINJY5ucj/+mDZR65PzwNVnQwOsayF0RjPLIp+I3U84IXrTNtNp0GIUOueu/ty:MR+59nYRzw0wlF0RjPLIECU84EJ49h
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

2023

Minor OS version

0

Major OS version

4

Entry point

5545

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

ValosploitV3_Installer.zip

ValosploitV3_Installer/Installer.exe

msvcrt

shell32

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

ValosploitV3_Installer.zip

ValosploitV3_Installer/Installer.exe

msvcrt

shell32

kernel32

generic