General

  • Target

    f6plu2xn.zip

  • Size

    28.8MB

  • MD5

    5f3ca4616c6046d67c8f09974fbba6c3

  • SHA1

    a60ab30db2ec57355846d3f6ecc58c152b419fc3

  • SHA256

    d39d54ace36d1f17efb131432bb1c8841178e3bde722c6d8bd68faa2acdabd79

  • SHA512

    ec3c00fa394956d10e95f569a5ac3a13270b1d978bf21b740a3057cef5791e6a17ebfcb83bcf68bf0d0ab64415580cf2bd4133dc2c7fa388d44662428807abb4

  • SSDEEP

    786432:9LfLl70LrRWghgnQ8iHOuzreK1aAMBN60LZZ2:zwh9HzFiM0LZ0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f6plu2xn.zip
    .zip

    Password: infected

  • BABYLON.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • trp.gif
  • zpresampler.dll
    .dll windows:6 windows x86 arch:x86

    fbd55124aea97629ef355745a9639abc


    Headers

    Imports

    Exports

    Sections