General

  • Target

    file.zip

  • Size

    7.7MB

  • MD5

    a25c1970f50f508b3f434f9a929bb0bb

  • SHA1

    289a3d493bdfecbe88cbeb9ff51ae967e2270286

  • SHA256

    dec836cd87167f5bd99be179fe40fe4eba1e5ca4093aa7b53575a113dffd3e2b

  • SHA512

    48350fad158503917b7062d6bfdbb165e54def3992bb9dc0b5d229bc1ffeb11a7d077c837cb258d5f230fd26c80e93a4724d366a6772d653c1c30e7b8b4d7e7b

  • SSDEEP

    196608:RSivuaCasUHXPe//P5NTA9mPlKCNy+VzYZ+o:RSimB1egbTAmtKCNL2z

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • file.zip
    .zip

    Password: 2024

  • password.jpg
  • setup.zip
    .zip

    Password: 2024

  • rasapi32/SystemSettings.Handlers.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    a85b9adaebf974dc2564089a91050e4f


    Headers

    Imports

    Exports

    Sections

  • rasapi32/icu.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    e932e3f0df205f2040dca6c08ecc3666


    Headers

    Imports

    Exports

    Sections

  • rasapi32/rasapi32.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    fbb9028adc12656452d39431b148cb20


    Headers

    Imports

    Exports

    Sections

  • rasapi32/wevtsvc.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    a905ef31a7398e7354ddfcec5cc82a93


    Headers

    Imports

    Exports

    Sections

  • setup.exe
    .exe windows:6 windows x86 arch:x86

    Password: 2024

    d79dd35f147f0bd91cc18a6615fcfa5d


    Headers

    Imports

    Sections

  • wevtsvc/Licenses/OEM/Professional/license.rtf
    .rtf
  • wevtsvc/Licenses/Volume/Professional/license.rtf
    .rtf
  • wevtsvc/Licenses/_Default/Professional/license.rtf
    .rtf
  • wevtsvc/wevtsvc.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    a905ef31a7398e7354ddfcec5cc82a93


    Headers

    Imports

    Exports

    Sections

  • wevtsvc/win32spl.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    8b131f6c824bbfd621b1af5c1e0b0060


    Headers

    Imports

    Exports

    Sections