General

  • Target

    shit.zip

  • Size

    50.2MB

  • MD5

    71886a8d23c98bfc06b59abf4d196785

  • SHA1

    9a6f0f7554a26ab15a93c779378af95ecd41c681

  • SHA256

    6f336f9493f204dd242ab3145617982e0d108d5254d8bb00fbed230cf9c10bec

  • SHA512

    c2de0eeac30163fbce1ee757eda19aa6dde6fcbd4bcbb12a075773ea92f267f1381f1f002312cd52569ab2f08c259e57cc0ab475cb5f832052a602ec2dece9e2

  • SSDEEP

    1572864:mhQD7l0vcFtGmrupbR9MOlmmwYpEJb2GC5LO8oWHJv90EPucq:B7l0Q8mg93wCaC5Lf11icq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • shit.zip
    .zip
  • Authento.exe
    .exe windows:6 windows x64 arch:x64

    f0486e7e054aa57188c99b0f71783b75


    Headers

    Imports

    Exports

    Sections

  • TLS Api/config.dist.yml
  • TLS Api/tls-client-api-1.7.2.exe
    .exe windows:6 windows x64 arch:x64

    65892a964106b5e0c6c363fdf21975eb


    Headers

    Imports

    Sections

  • resources/Authento.dll
    .dll windows:6 windows x64 arch:x64

    7ecc3b9e18c31c23f5275a91f6c533d1


    Headers

    Imports

    Exports

    Sections