03062024_1441_03062024_SKM 26399[.]gz

General

Target
03062024_1441_03062024_SKM 26399.gz
Size 896KB
Sample240603-r2wq2aba99
SHA256 dfe4e970ec744a40ed8edbcbe535a17ddd58e9b9677f101bf266447ffa742867
MD5 f5cfbb024a1d21231e93b71f3d231c34
SHA1 de277947d95b8f5e0e437dd38657ad991768ba7e
SHA512 d914cbbdd7e58ff64c5833576c8636f50c43fbacd8a56dc4312a14c3bb3bdec8d7570de06888041495174b9e910ae5cd364725345e6f8171df7bae9c4d56a087
SSDEEP 24576:v0oDn4RT7nJLC5Ze77UJPDbVbS3PNLTo9qcnT:MrTNO5Z3VkAT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SKM 26399.exe

File Explorer

03062024_1441_03062024_SKM 26399.gz

.rar 896KB
SKM 26399.exe

.exe 1.1MB

03062024_1441_03062024_SKM 26399.gz

SHA256 dfe4e970ec744a40ed8edbcbe535a17ddd58e9b9677f101bf266447ffa742867
MD5 f5cfbb024a1d21231e93b71f3d231c34
SHA1 de277947d95b8f5e0e437dd38657ad991768ba7e
SHA512 d914cbbdd7e58ff64c5833576c8636f50c43fbacd8a56dc4312a14c3bb3bdec8d7570de06888041495174b9e910ae5cd364725345e6f8171df7bae9c4d56a087
SSDEEP 24576:v0oDn4RT7nJLC5Ze77UJPDbVbS3PNLTo9qcnT:MrTNO5Z3VkAT
MD5 SHA1 SHA512 SSDEEP

Password

infected

SKM 26399.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 71e0f19321cc5cb94fabeb2f8b2428874796a9bacd25580c8cd366539822de66
MD5 5b46b07fbd077936f60e13f52f37dd2c
SHA1 50877cd5258aaad159680de93285ae8db97c448d
SHA512 51280769d435cd15542eb46125e4c5added6f8d822db1ea402ff8ffca982c9ebf0b987dfcde79d5b36079412ea03d42b57b8e64e19f918948511d136744b5f03
SSDEEP 24576:rMYe82eN5is4lRugDWRf6xztqFxoI6fbe2NWHV5hGnpcV:rMYeeN5is0RugDWtewxozbHNOVjGn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1115606

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

03062024_1441_03062024_SKM 26399.gz

SKM 26399.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

03062024_1441_03062024_SKM 26399.gz

SKM 26399.exe

mscoree

dotnet