General

  • Target

    10072024_0105_09072024_Ticket Receipt and Fine.zip

  • Size

    629KB

  • MD5

    77f84d9bb591a2cf5391557aae585f3b

  • SHA1

    97b1a96a59077052861cf215739b32e3bd02fb5f

  • SHA256

    1859fec327baa69a10975e1884e4a70731b060e12aa8aca81dfe43e9e209f1df

  • SHA512

    b1305a9b3ff5719c7bdc7ce0f6ae00574f732467106675a57888ecb2a3a8dd604667c131e5ff753fb4ba7b5aba7576fd01c6b58d8d1c7cc6bf3b5eb838a3642d

  • SSDEEP

    12288:kvF+KA5ppnfw7/r1JYNxoZEWJ8QgZ97XKtq5E2wAq+GDJpqYvLeMcN0IlWTsOL:IlewP1JYQ78QO9jKQBdGDuYCM9IOL

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 10072024_0105_09072024_Ticket Receipt and Fine.zip
    .zip

    Password: infected

  • swift copy.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections