NEW ORDER CONFIRMATION[.]zip[.]zip

General

Target
NEW ORDER CONFIRMATION.zip.zip
Size 2.9MB
Sample240510-khdmsagc69
SHA256 1b9ba67d4a203183fb845772c3edb45c98db044809a23c7762134f111fbc0a32
MD5 8c9f896110cd0a4f4fc4b73bdab5636e
SHA1 9b49617478fa9c15717653ca657e09b41483bbf4
SHA512 8fc0b1be31153ce57c9afd25a751f7227163f9bdd73aafde914bf3edc0abd4b2fb9861cebcc51eb99b5cf749c7f6037efdc3d6ccea0e88c768a6c9b56969e65f
SSDEEP 49152:2LZjr5T5f/KPuwdFe24nrn6hlbGuxBAK9TNqaXxCsG2jGPAv4PjyJHY1C:2V1J/K24Fe26z6Dy0BANaXU2SPdPjacC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/NEW ORDER CONFIRMATION.scr

File Explorer

NEW ORDER CONFIRMATION.zip.zip

.zip 2.9MB
04fe72c7211de060e7f25a1f6b7e30fd2760b983cf7251d0f11b4a4b01b588e9

.zip 2.9MB
NEW ORDER CONFIRMATION.scr

.exe 3.0MB

NEW ORDER CONFIRMATION.zip.zip

SHA256 1b9ba67d4a203183fb845772c3edb45c98db044809a23c7762134f111fbc0a32
MD5 8c9f896110cd0a4f4fc4b73bdab5636e
SHA1 9b49617478fa9c15717653ca657e09b41483bbf4
SHA512 8fc0b1be31153ce57c9afd25a751f7227163f9bdd73aafde914bf3edc0abd4b2fb9861cebcc51eb99b5cf749c7f6037efdc3d6ccea0e88c768a6c9b56969e65f
SSDEEP 49152:2LZjr5T5f/KPuwdFe24nrn6hlbGuxBAK9TNqaXxCsG2jGPAv4PjyJHY1C:2V1J/K24Fe26z6Dy0BANaXU2SPdPjacC
MD5 SHA1 SHA512 SSDEEP

Password

infected

NEW ORDER CONFIRMATION.scr

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 ba58f8ba7420adb8ffa2c999e7b20c1958d353c1146cb5eff41b5057f320f7be
MD5 92b7e779a83e62d1ba8c418a864ab54e
SHA1 8352881b49b323ff9a9acbec1fbbaf4365bae464
SHA512 605f0abd697f9a64d34235724875b8f77896c7b0f54af3adc3606aa577aa9ef73dcd6f1b03a35400d4925ff7ec0afd5d13b2208a646648369e657df1a33bc438
SSDEEP 49152:/dmozqOYEP6j/XJ0K8tcE/Bk1Bytv+jVd4+mivVPMNj8gt:/LzhP6jPJJ8tcqBKRhm9Ygt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3103326

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

NEW ORDER CONFIRMATION.zip.zip

04fe72c7211de060e7f25a1f6b7e30fd2760b983cf7251d0f11b4a4b01b588e9

NEW ORDER CONFIRMATION.scr

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

NEW ORDER CONFIRMATION.zip.zip

04fe72c7211de060e7f25a1f6b7e30fd2760b983cf7251d0f11b4a4b01b588e9

NEW ORDER CONFIRMATION.scr

mscoree

dotnet