30052024_1406_28052024_SWF0550[.]rar

General

Target
30052024_1406_28052024_SWF0550.rar
Size 616KB
Sample240530-renrxacc44
SHA256 06901b02d137bffce6113bbbe63d341908bd7cbc128e71ade1123a328aaebf11
MD5 093f761909fbc824a9dc311f22435d45
SHA1 21a28d2f46a17a4f012b0e68516f24c58fa69d97
SHA512 b803ee974b5e6adc0c64aaf242050790ab9f618641384f1c9222437b412ff3e4dfa96a446f3b9dd5a012b31723267561943e4990e7f2f1840aeac915fee988e5
SSDEEP 12288:er7NdQkhBp5N8lvauuslPQCwLIKbuK9EkZbOKZhr+/B6EPGlF11FN:GBhBKvauuslPQlLIKbTVbQJPqv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SWF0550.exe

File Explorer

30052024_1406_28052024_SWF0550.rar

.rar 616KB
SWF0550.exe

.exe 668KB

30052024_1406_28052024_SWF0550.rar

SHA256 06901b02d137bffce6113bbbe63d341908bd7cbc128e71ade1123a328aaebf11
MD5 093f761909fbc824a9dc311f22435d45
SHA1 21a28d2f46a17a4f012b0e68516f24c58fa69d97
SHA512 b803ee974b5e6adc0c64aaf242050790ab9f618641384f1c9222437b412ff3e4dfa96a446f3b9dd5a012b31723267561943e4990e7f2f1840aeac915fee988e5
SSDEEP 12288:er7NdQkhBp5N8lvauuslPQCwLIKbuK9EkZbOKZhr+/B6EPGlF11FN:GBhBKvauuslPQlLIKbTVbQJPqv
MD5 SHA1 SHA512 SSDEEP

Password

infected

SWF0550.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e3b946919fbd0a093a79bc59072379151391a6f4fef88aa86d56a3af7e82a51e
MD5 7e23d3e78d1785fee81947b0f3785074
SHA1 bc7c31eb0b915a373627e0b53d30d2c9ba01ea47
SHA512 745b091d8bbdc29dfb949c74b02abd1e6555f9444bc77dd1e8f7f0f2fa03aa151414d873768bdbd6db64817b6adfb2cfaa9d23cd3cd0466830a2c7037c7cc1d8
SSDEEP 12288:GPCCVS8VB57yc5QztiX7taQj+EWrUf0b4PKTYBtnbmcyqmsgU:Gf5BZyyUtuaef0byEmmRs5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

673242

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

30052024_1406_28052024_SWF0550.rar

SWF0550.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

30052024_1406_28052024_SWF0550.rar

SWF0550.exe

mscoree

dotnet