General

  • Target

    f2b5c3b918524cce726436906f2db663.bin

  • Size

    412KB

  • MD5

    5760f533ea36d1cd59e35a31019305d2

  • SHA1

    7108850330f7a4e313ef1c8b5365ae75b532d78e

  • SHA256

    8013b7f9e616112d9241def4b8deba13aa02c4b03100df85c926811777f22c06

  • SHA512

    40edcce85356590d8ac9b32e6e75bee5d0873ee9dd08948b6056e157d792cfbee2f11190760a780baa7b6102f72fd96943c58f3ce6b11148acbb326fef6b7e4a

  • SSDEEP

    12288:H2Cuw1066rZegz/lbd6VVQjE/362XgA+bRgiWt:WGWIgblbMrQEXgA+tgiA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f2b5c3b918524cce726436906f2db663.bin
    .zip

    Password: infected

  • 8f2087f7290b347e2fea47e707e82c76db3ce04a5ac74023f55dce4d98aa6378.rar
    .rar

    Password: infected

  • Mekanikken.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    176ce6397deb91dca8c8158bf86c99a0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    4f33ea844b96a31c8f4690530ba63854


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    9f4228b95ba1827b2dc7f6da088b955c


    Headers

    Imports

    Exports

    Sections

  • Forebygg185/Epode/sammenkoble.bet
  • Forebygg185/Epode/slemmeste.emi
  • Forebygg185/Epode/tyristorer.txt
  • Forebygg185/Parkas.Kri
  • Forebygg185/allergikernes.Del
  • Forebygg185/counterpendent.dis