17560242131[.]zip | Triage™

General

Target
17560242131.zip
Size 320KB
Sample240605-jpzcdsaa91
SHA256 d4d5f54dd003162bf3d04f0343ea136226552b2e004c2ba565d38803cb9f5282
MD5 1a9e5d18ad3df046eaa8d431a48a2b2a
SHA1 6f99aa0906fe34a3f2033423ca8e053002d2843a
SHA512 e0fcf57b62202c7f3c4dbacdb31ff04ea547d562b68f2bec8a4a0d4ef10c71216a1794d7d6f7624cdeeb7b86c48e7e074522c9078b1c70fe8f5857f7e9e3ef0c
SSDEEP 6144:mKme+a2LchRZMjReP2ICVbzD7mFtQCEKh3/6S3lKZIsOCp+99q3HW6SzJQdrRHAd:mKl+XLYueP3kbCtxva+am6kJ02M6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/176aa2e0fe77812b96ff393d634175093672ca764f41c146f04ca3deb8be4fbe

File Explorer

17560242131.zip

.zip 320KB
176aa2e0fe77812b96ff393d634175093672ca764f41c146f04ca3deb8be4fbe

.exe 407KB

17560242131.zip

SHA256 d4d5f54dd003162bf3d04f0343ea136226552b2e004c2ba565d38803cb9f5282
MD5 1a9e5d18ad3df046eaa8d431a48a2b2a
SHA1 6f99aa0906fe34a3f2033423ca8e053002d2843a
SHA512 e0fcf57b62202c7f3c4dbacdb31ff04ea547d562b68f2bec8a4a0d4ef10c71216a1794d7d6f7624cdeeb7b86c48e7e074522c9078b1c70fe8f5857f7e9e3ef0c
SSDEEP 6144:mKme+a2LchRZMjReP2ICVbzD7mFtQCEKh3/6S3lKZIsOCp+99q3HW6SzJQdrRHAd:mKl+XLYueP3kbCtxva+am6kJ02M6
MD5 SHA1 SHA512 SSDEEP

Password

infected

176aa2e0fe77812b96ff393d634175093672ca764f41c146f04ca3deb8be4fbe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 176aa2e0fe77812b96ff393d634175093672ca764f41c146f04ca3deb8be4fbe
MD5 2a87e5d9f20df46363ce6e9b7559827a
SHA1 264a45ea0464a6efb7407776cfcfd1baebe27e7c
SHA512 a3bc9c4a6e2659c02951b59e6477d180a8ff590631b2eacc005fee49d1a4a615e23cf08095e2572c3a9785c5a27a43b792b0713b9aaa1187edb535803b7d633a
SSDEEP 6144:IZMslTeyLdj/YTqX3cM74I34Ae3hQTNa8Y0cYTwp72fjDnWMwt:ICweydWqnT4IoB2a8Y/+6ft
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

419438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

17560242131.zip

176aa2e0fe77812b96ff393d634175093672ca764f41c146f04ca3deb8be4fbe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

17560242131.zip

176aa2e0fe77812b96ff393d634175093672ca764f41c146f04ca3deb8be4fbe

mscoree

dotnet