exploitshit[.]zip | Triage™

General

Target
exploitshit.zip
Size 569KB
Sample240414-x3kcaabd84
SHA256 bc797ac3593f379378d338d437f476a942fc1e3c1b8684e50cb9174fc24f58b9
MD5 f0373216bec8ab2c5800dfdbb580410c
SHA1 5cb7c237662dff147fbf73734291ca341e8c0b38
SHA512 91984dc0219ba88223e60339909c6a2fe7f9b01e522fbe98f1d09c6ac67f874da7772188a4b8355596bd27941ec17b5c7e34e0979ad62ac494ed505fdefba740
SSDEEP 12288:LroKQGq3VflVQudezPCaRARfCIG8bzudhBV2rBrRqKrTUCbMIGu8k:Lrdq3VfliudMlRdgSHSBNN47ju8k
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/exploit.exe

File Explorer

exploitshit.zip

.zip 569KB
exploit.exe

.exe 452KB
input.suo

43KB
vscode.bat

274KB

exploitshit.zip

SHA256 bc797ac3593f379378d338d437f476a942fc1e3c1b8684e50cb9174fc24f58b9
MD5 f0373216bec8ab2c5800dfdbb580410c
SHA1 5cb7c237662dff147fbf73734291ca341e8c0b38
SHA512 91984dc0219ba88223e60339909c6a2fe7f9b01e522fbe98f1d09c6ac67f874da7772188a4b8355596bd27941ec17b5c7e34e0979ad62ac494ed505fdefba740
SSDEEP 12288:LroKQGq3VflVQudezPCaRARfCIG8bzudhBV2rBrRqKrTUCbMIGu8k:Lrdq3VfliudMlRdgSHSBNN47ju8k
MD5 SHA1 SHA512 SSDEEP

exploit.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b08f9e7c8ce2f261154a026845b85fe29f6ba5ad2563ef289e6e3bb6aba8cb9a
MD5 68bc76c2ed77201f7d2860496c9f59ad
SHA1 8192f2529a0b43d84e8ce9a4a579baa2db0a9590
SHA512 b25f85766478c8b6595aa0badccca7b5741cef06cd7cfe8bee041d7d1727d0ba5308cc60be6d3cfa9390c1cd15cf2ebe86e82eb7e421abd775e7c62610517719
SSDEEP 12288:U0kqjVnl36ud0zR/6CtQ9PUHIG8DhMuD7R:HkqjVnlqud+/2P+AOE7R
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

468446

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\maxim\source\repos\suo_exploit_test\obj\Release\suo_exploit_test.pdb

exploitshit.zip

exploit.exe

mscoree

dotnet

input.suo

vscode.bat

Sharing

General

Malware Config

Signatures

File Explorer

exploitshit.zip

exploit.exe

mscoree

dotnet

input.suo

vscode.bat