7bd15d1373432664a9bec73add2f5f810f7aa4ba1e3b5b4d0886b681fe50dc03[.]zip

General

Target
7bd15d1373432664a9bec73add2f5f810f7aa4ba1e3b5b4d0886b681fe50dc03.zip
Size 25KB
Sample240517-b1n2ssbc31
SHA256 7bd15d1373432664a9bec73add2f5f810f7aa4ba1e3b5b4d0886b681fe50dc03
MD5 526494543d8c40e17833f9b1356c0881
SHA1 ccc1e42780e5de0cca379d2bc2c427ae09d71a85
SHA512 a43aa9a56cba19158c8869c738fc8c4ad885b3bc1e44330dba394559287939f7e433ae265cb1f0636bc3d03b9299e1f2ba028e4b1fc299d56948eed352910abf
SSDEEP 768:+tyk5FWuC5IiSdTkbux1tqoLUzMZsh8M20BXvDotCNv6o:+tldiSBkbufLSH2astCNv6o
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Swift Copy.exe

File Explorer

7bd15d1373432664a9bec73add2f5f810f7aa4ba1e3b5b4d0886b681fe50dc03.zip

.zip 25KB
Swift Copy.exe

.exe 49KB

7bd15d1373432664a9bec73add2f5f810f7aa4ba1e3b5b4d0886b681fe50dc03.zip

SHA256 7bd15d1373432664a9bec73add2f5f810f7aa4ba1e3b5b4d0886b681fe50dc03
MD5 526494543d8c40e17833f9b1356c0881
SHA1 ccc1e42780e5de0cca379d2bc2c427ae09d71a85
SHA512 a43aa9a56cba19158c8869c738fc8c4ad885b3bc1e44330dba394559287939f7e433ae265cb1f0636bc3d03b9299e1f2ba028e4b1fc299d56948eed352910abf
SSDEEP 768:+tyk5FWuC5IiSdTkbux1tqoLUzMZsh8M20BXvDotCNv6o:+tldiSBkbufLSH2astCNv6o
MD5 SHA1 SHA512 SSDEEP

Password

infected

Swift Copy.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 80762425adc5f24b5c7be359dd4cb7c1c657bb21f0304dcb89eb6bd6d8d8e0da
MD5 fadef7ce43e9627a752d03a41e71ee41
SHA1 f8a9907fdb73ca4b162b20a79d9384ab5277af31
SHA512 764ddce479431043510647f95fb376be3b62bc7e6283173c9d7849130335a8daa2aad2b86e8a7693cd5c92c1b94e809cf1a0ec1ecbb2fb6c196d1764a0a9a081
SSDEEP 768:P1YSqVwQ8rD6pSg12mkQu3MyoELiym7/FDFTNxIrgBjv5VQ6:PyeQkDxtcyJm7tk0jv5VJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

55790

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

7bd15d1373432664a9bec73add2f5f810f7aa4ba1e3b5b4d0886b681fe50dc03.zip

Swift Copy.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

7bd15d1373432664a9bec73add2f5f810f7aa4ba1e3b5b4d0886b681fe50dc03.zip

Swift Copy.exe

mscoree

dotnet