03062024_1429_01062024_MV GOLDEN SCHULTE[.]zip

General

Target
03062024_1429_01062024_MV GOLDEN SCHULTE.zip
Size 350KB
Sample240603-rtlwvshe2v
SHA256 1d76a11a2c3fc326e987460e8db18057e6d006940f5e17cd284b5efa4e357f14
MD5 382ce1d3c77a05e682a4e0b1b5eb82e6
SHA1 8efbacf751f3cb1cafcb6002f7570719584d702a
SHA512 e146b6132ff8ef9249f856835d71b8dc569964149fc18db9c02326503832b92cbcfe900a5b1f91e91d253fc02204d867edae4f45d9f24d35d30da4c94a31a291
SSDEEP 6144:hL3vNWryVwGpboHQQNIgp7B6T3s89ugdclCtt3NA6CL3q5IcWRdv35TYRwpG:hL/4ryxoQQzt6T7VmWpQ5w
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MV GOLDEN SCHULTE.exe

File Explorer

03062024_1429_01062024_MV GOLDEN SCHULTE.zip

.zip 350KB
MV GOLDEN SCHULTE.exe

.exe 637KB

03062024_1429_01062024_MV GOLDEN SCHULTE.zip

SHA256 1d76a11a2c3fc326e987460e8db18057e6d006940f5e17cd284b5efa4e357f14
MD5 382ce1d3c77a05e682a4e0b1b5eb82e6
SHA1 8efbacf751f3cb1cafcb6002f7570719584d702a
SHA512 e146b6132ff8ef9249f856835d71b8dc569964149fc18db9c02326503832b92cbcfe900a5b1f91e91d253fc02204d867edae4f45d9f24d35d30da4c94a31a291
SSDEEP 6144:hL3vNWryVwGpboHQQNIgp7B6T3s89ugdclCtt3NA6CL3q5IcWRdv35TYRwpG:hL/4ryxoQQzt6T7VmWpQ5w
MD5 SHA1 SHA512 SSDEEP

Password

infected

MV GOLDEN SCHULTE.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 9727ca1c125f58f6be7bb529b9e5dd3b3ec49268e74f94310d876985d98de915
MD5 65cdff442b96de6c0e6e26abff770326
SHA1 bcc58c00aad021846bcae135a8115c55264559bf
SHA512 1fa015828422392f1b71fe5f7f04739b8c64f7f8112e1e648f566e036d8869869bc9a8a91ae0a94b98042307bfddfa2110da1c111ee5610e97b69413d4f1ffe9
SSDEEP 12288:6YydfiA1BFSi6R2UPwYOccmotKrPJscT7cDnU:63fiAJmOYTiMJs5Dn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

658174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

03062024_1429_01062024_MV GOLDEN SCHULTE.zip

MV GOLDEN SCHULTE.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

03062024_1429_01062024_MV GOLDEN SCHULTE.zip

MV GOLDEN SCHULTE.exe

mscoree

dotnet