General

  • Target

    xnz_oknphwcmwd.zip

  • Size

    4.3MB

  • MD5

    3085a1274edac523b96417032618c807

  • SHA1

    e716638ffe444ce9804b34f3eb32565bdc91ab4b

  • SHA256

    37b4557cf2942776f2513bf6c5616e510bce797781c7fadfd8090ae45ad457c7

  • SHA512

    97ba20ac414b74e2994b04a0562371b1b753969619cee8f76357a83c2550e9a2206e1adbdf94766d5370fae40a136ce187a4e55fb2763eb7a0ad9158aa59d70d

  • SSDEEP

    98304:7Wj6YCf3kIhev2g2bRDaB0bhJQiHMPMExODFgvbFfHeWd:fN/jhSBOKPMWORKbNHPd

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xnz_oknphwcmwd.zip
    .zip

    Password: Clemi

  • loader.exe
    .exe windows:6 windows x64 arch:x64

    Password: Clemi


    Headers

    Sections