Ezxotfkmz[.]exe | Triage™

Resubmissions

09/04/2024, 03:49

240409-edcl2adf6810

09/04/2024, 03:48

09/04/2024, 03:47

09/04/2024, 03:47

03/04/2024, 12:14

Sharing

Copy URL Twitter E-mail

General

Target
Ezxotfkmz.exe
Size 451KB
Sample240409-edcl2adf68
SHA256 89d511c97a4e0f4bf48a72fe764adb6d3de9007859c7632dc07477f2062c2b20
MD5 0d34f2b095cbff0be00eb45758929907
SHA1 3fa3b5e296d49c4d8e6dfc5d4b775a48609aca78
SHA512 6965e9d2c2b9a11bb428ba8ac47202b7d0d4aaf826f905fb0afee903b2ae4b85cec446b536721b84237aeeb08f03ff413a67c75c36ba78d85a6727831e7b6340
SSDEEP 6144:xpHC550+1KYQ2JRpK3SRgadBU9RwfqUKDPi5xo/nY:xpis+S2JRpK3SRgKQ/n
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ezxotfkmz.exe

File Explorer

Ezxotfkmz.exe

.exe 451KB

Ezxotfkmz.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 89d511c97a4e0f4bf48a72fe764adb6d3de9007859c7632dc07477f2062c2b20
MD5 0d34f2b095cbff0be00eb45758929907
SHA1 3fa3b5e296d49c4d8e6dfc5d4b775a48609aca78
SHA512 6965e9d2c2b9a11bb428ba8ac47202b7d0d4aaf826f905fb0afee903b2ae4b85cec446b536721b84237aeeb08f03ff413a67c75c36ba78d85a6727831e7b6340
SSDEEP 6144:xpHC550+1KYQ2JRpK3SRgadBU9RwfqUKDPi5xo/nY:xpis+S2JRpK3SRgKQ/n
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

185374

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Ezxotfkmz.exe

mscoree

dotnet