Resubmissions

01/07/2024, 20:50

240701-zmzhdayfjh 3

01/07/2024, 20:46

240701-zkk7zaydrf 3

General

  • Target

    installer.zip

  • Size

    14.8MB

  • MD5

    7fe7cfca3e9f4a0882cc63c354c3009b

  • SHA1

    de0b9f79a99ad9a42c3dd79d418279bbf77ddbf1

  • SHA256

    5bdcc4d7850b6c95b29f1c629c8df079198064410b8934f23c2aec645f887858

  • SHA512

    0adf0fbcaed3c2c9a1891b32677f04be26e520fb1c7e8b919643629afc7f74c5898df5d0dd4fec1f3f6f5e9e19785593d5ca6bc8df1ff255288149b5aaa53084

  • SSDEEP

    393216:1ab/0gOKVnYFuJOqZmJRhC3qX1GGScjeYSiT/xwCBBjY9yLKO:16XJbJOb5C3W1G7YHT/mIZXKO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • installer.zip
    .zip
  • 7za.exe
    .exe windows:4 windows x86 arch:x86

    1a9deef54b6b9763013f742bee84d533


    Headers

    Imports

    Sections

  • conpty.node
    .dll windows:6 windows x64 arch:x64

    ea58aff2bbb719e9ffc8dcee3d43fb8f


    Headers

    Imports

    Exports

    Sections

  • conpty_console_list.node
    .dll windows:6 windows x64 arch:x64

    7163ca00f897cefec0be8f27112cda93


    Headers

    Imports

    Exports

    Sections

  • cssource-installer.exe
    .exe windows:6 windows x64 arch:x64

    a6aaa55127b35c2aec13865378141251


    Headers

    Imports

    Exports

    Sections

  • pty.node
    .dll windows:6 windows x64 arch:x64

    4d2070cf54123a71793633030713a181


    Headers

    Imports

    Exports

    Sections

  • winpty-agent.exe
    .exe windows:6 windows x64 arch:x64

    b279ed72a161648259f8ba5f0d40c2df


    Headers

    Imports

    Sections

  • winpty.dll
    .dll windows:6 windows x64 arch:x64

    2522d2bc9ffa8380c4c7dccdb715af32


    Headers

    Imports

    Exports

    Sections