4c0153b979e65346c1d6f863086082ec5ef103cbf6b0f5e8652d61da678a8ca5[.]zip

General

Target
4c0153b979e65346c1d6f863086082ec5ef103cbf6b0f5e8652d61da678a8ca5.zip
Size 324KB
Sample240417-yft4mscc87
SHA256 0c808615fdd1fafc26eabc59ae8ac23a50a5f479b295ada0c0796b3a6e0396ab
MD5 b68b7096867f73759a7ed462e82d2c5b
SHA1 54253b8fdaa9bff5c6ca1571c85244f2bb6d5055
SHA512 7702819e268d76c27e2a1f5c41684aefb48e645b04926da280db5d19226ab4129a8c5312d4fb12080f4da318a5281178f6d315010d662faa5bd3b22c7a92ddfe
SSDEEP 6144:ZblKSplr4MXPjHZt2rnywNgZ4J0qFK49VS9Ub8LoivXN/nzCLrFK:NoSplr4mPMnXNA4VJVS9Ub8LFN/zCnE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4c0153b979e65346c1d6f863086082ec5ef103cbf6b0f5e8652d61da678a8ca5.exe

File Explorer

4c0153b979e65346c1d6f863086082ec5ef103cbf6b0f5e8652d61da678a8ca5.zip

.zip 324KB
4c0153b979e65346c1d6f863086082ec5ef103cbf6b0f5e8652d61da678a8ca5.exe

.exe 390KB

4c0153b979e65346c1d6f863086082ec5ef103cbf6b0f5e8652d61da678a8ca5.zip

SHA256 0c808615fdd1fafc26eabc59ae8ac23a50a5f479b295ada0c0796b3a6e0396ab
MD5 b68b7096867f73759a7ed462e82d2c5b
SHA1 54253b8fdaa9bff5c6ca1571c85244f2bb6d5055
SHA512 7702819e268d76c27e2a1f5c41684aefb48e645b04926da280db5d19226ab4129a8c5312d4fb12080f4da318a5281178f6d315010d662faa5bd3b22c7a92ddfe
SSDEEP 6144:ZblKSplr4MXPjHZt2rnywNgZ4J0qFK49VS9Ub8LoivXN/nzCLrFK:NoSplr4mPMnXNA4VJVS9Ub8LFN/zCnE
MD5 SHA1 SHA512 SSDEEP

Password

infected

4c0153b979e65346c1d6f863086082ec5ef103cbf6b0f5e8652d61da678a8ca5.exe

IMPHASH ab8fd60b3da01515e6706e8d122c633f
SHA256 4c0153b979e65346c1d6f863086082ec5ef103cbf6b0f5e8652d61da678a8ca5
MD5 8c64181ff0dc12c87e443aae94bf6650
SHA1 e91d7ebd17912785caa3e71ef1571dc01b1cd854
SHA512 4854565b054297dffc13b659a53059ee8731dca02f3027501254551cb4af20b68fb121d03e528151cf910238b49bf00a3827e74e4bb68faf85ebc50d02ad5c17
SSDEEP 12288:ef/X4NTn/xVkNG+w+9OqFoK323qdQYKU3:EXATn/xVkNg+95vdQa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4747

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Zeus \PC\documents\visual studio 2010\Projects\Keygroup\Release\Keygroup.pdb

4c0153b979e65346c1d6f863086082ec5ef103cbf6b0f5e8652d61da678a8ca5.zip

4c0153b979e65346c1d6f863086082ec5ef103cbf6b0f5e8652d61da678a8ca5.exe

kernel32

shell32

generic

Sharing

General

Malware Config

Signatures

File Explorer

4c0153b979e65346c1d6f863086082ec5ef103cbf6b0f5e8652d61da678a8ca5.zip

4c0153b979e65346c1d6f863086082ec5ef103cbf6b0f5e8652d61da678a8ca5.exe

kernel32

shell32

generic