Overview

overview

4

Static

static

3

ro (1).zip

windows10-2004-x64

1

Device/Har...Sc.exe

windows10-2004-x64

4

manifest.json

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ro (1).zip

  • Size

    26KB

  • MD5

    39d29359bfd2680c2a133983e4dc3d3b

  • SHA1

    a7c340ea5e07ed1a0fca7f7fff51c5626d8366db

  • SHA256

    fb94a8661dbabc4a1561781e72fc39c298374a2674a97457cdf69ca2314d6669

  • SHA512

    e518dd0823eecb7bc4dc84d8618edf8c632b6f7a58844897fd3388354f4a4e584ecc11eba523998db6e599571ce504102b4ad27b3f14fe9723fe13e51b01873b

  • SSDEEP

    768:N8jGG6JRp5Yd0Wqi1FIkxLRLa66/RePOuCQI:N8jMtGdLqAOQNJ6Q9CQI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ro (1).zip
    .zip

    Password: Password123456

  • Device/HarddiskVolume3/Windows/SYSVOL/domain/Policies/{8559104C-A0A5-4DB3-8E4A-E90B3E86A41D}/User/Scripts/Logon/PushPrinterConnections.exe
    .exe windows:6 windows x86 arch:x86

    Password: Password123456

    cf5c76e9a03d85b1bb6df97dd3d17a26


    Headers

    Imports

    Sections

  • manifest.json