09042024_2136_DRBS2279[.]exe

Resubmissions

09/04/2024, 19:27

240409-x6ax1sff2210

09/04/2024, 13:36

240409-qwb9rsbf3t10

Sharing

Copy URL Twitter E-mail

General

Target
09042024_2136_DRBS2279.exe
Size 353KB
Sample240409-x6ax1sff22
SHA256 29f8b50f737feef9ec7439780daead395bf2bf278a4540ddffe64ca70aa9f462
MD5 4a78707180195f7584386470809e4aec
SHA1 0bc190b0cbb3983ce1b0bf7f5efa4a6f14955a78
SHA512 785a0635bd215c67eefd23ad57b2193745220646bb58434d0d526e34d10560b6e8b43fbd23641d1632995ce311d820a439fc0733048e55c04baab2dbb8981b7a
SSDEEP 6144:Iu4ypBt/6bC6p/8jJkJaVnQUKRnazBrRYJs3mb2stMK39V8s98ix2p:Iu1t/6+6pWG8aRna9RYSQTXtV8s98E2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09042024_2136_DRBS2279.exe

File Explorer

09042024_2136_DRBS2279.exe

.exe 353KB

09042024_2136_DRBS2279.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 29f8b50f737feef9ec7439780daead395bf2bf278a4540ddffe64ca70aa9f462
MD5 4a78707180195f7584386470809e4aec
SHA1 0bc190b0cbb3983ce1b0bf7f5efa4a6f14955a78
SHA512 785a0635bd215c67eefd23ad57b2193745220646bb58434d0d526e34d10560b6e8b43fbd23641d1632995ce311d820a439fc0733048e55c04baab2dbb8981b7a
SSDEEP 6144:Iu4ypBt/6bC6p/8jJkJaVnQUKRnazBrRYJs3mb2stMK39V8s98ix2p:Iu1t/6+6pWG8aRna9RYSQTXtV8s98E2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

343134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

09042024_2136_DRBS2279.exe

mscoree

dotnet