Resubmissions

12/07/2024, 12:47

240712-pz7dmswela 7

12/07/2024, 12:46

240712-pznxaswejh 3

12/07/2024, 12:45

240712-py4w5awdqg 3

General

  • Target

    onefile_3368_133652613788244417.zip

  • Size

    12.8MB

  • MD5

    f196be9d9c66a0bad62151860e9a656c

  • SHA1

    b4ae65e82fe20392faea9a071166093afd8ca461

  • SHA256

    6c577a5ec7aca0bc5273bffee9ee53bc2753e8a8e710b70273844e74919a0a0c

  • SHA512

    58a24d8dde045e29f3d284975c5d60bf2e2a0b6576b6c3dca923851865a54733b4afaf9a33489da95b47b878708e24faae89414f0a302b8e424244acc0da9dd0

  • SSDEEP

    393216:uJhIRkIiokqiCkznvh+0OIniTpYwiaqxsGduH:uJFIiAiCk7vkbIiTiwiaqSGcH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • onefile_3368_133652613788244417.zip
    .zip

    Password: 4⁣39⁣08taup⁣q⁣t89ap3m4vq⁣⁣9m⁣8vt93u83t⁣98⁣⁣

  • onefile_3368_133652613788244417/_bz2.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 4⁣39⁣08taup⁣q⁣t89ap3m4vq⁣⁣9m⁣8vt93u83t⁣98⁣⁣

    ffa916dfdc50e863f51c0b6a5f824af6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/_cffi_backend.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 4⁣39⁣08taup⁣q⁣t89ap3m4vq⁣⁣9m⁣8vt93u83t⁣98⁣⁣

    cac823b8d6875369af8d985d0998a119


    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/_ctypes.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 4⁣39⁣08taup⁣q⁣t89ap3m4vq⁣⁣9m⁣8vt93u83t⁣98⁣⁣

    e9c7683b409661b730f740b9e8192dc9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/_decimal.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 4⁣39⁣08taup⁣q⁣t89ap3m4vq⁣⁣9m⁣8vt93u83t⁣98⁣⁣

    bb2433e9e7d9719f9a68a0efb6c798bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/_hashlib.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 4⁣39⁣08taup⁣q⁣t89ap3m4vq⁣⁣9m⁣8vt93u83t⁣98⁣⁣

    683c97b97649a9c2dc807b6f67c277a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/_lzma.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 4⁣39⁣08taup⁣q⁣t89ap3m4vq⁣⁣9m⁣8vt93u83t⁣98⁣⁣

    9737ade4e3ae3cc469d7407b46aaf0df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/_multiprocessing.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 4⁣39⁣08taup⁣q⁣t89ap3m4vq⁣⁣9m⁣8vt93u83t⁣98⁣⁣

    e5a0297f9773fa33773c0b4088dbbf91


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/_queue.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 4⁣39⁣08taup⁣q⁣t89ap3m4vq⁣⁣9m⁣8vt93u83t⁣98⁣⁣

    14b0a3b332c78da6de03df6b128fe759


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/_socket.pyd
    .dll .js windows:6 windows x64 arch:x64 polyglot

    776b7c5bc1aea73a6f74ab11ef18f641


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/_ssl.pyd
    .dll windows:6 windows x64 arch:x64

    1fcf5043325b1343fa5a5d7a85838079


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/certifi/cacert.pem
  • onefile_3368_133652613788244417/charset_normalizer/md.pyd
    .dll windows:6 windows x64 arch:x64

    eb5007b33b7858029163a157c5bd0e49


    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/charset_normalizer/md__mypyc.pyd
    .dll windows:6 windows x64 arch:x64

    359e1b7c70d3b804386b065ce43db6ec


    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/client v2.exe
    .exe windows:4 windows x64 arch:x64

    9fdf374711f83154a4f17d1b284f92ef


    Headers

    Imports

    Sections

  • onefile_3368_133652613788244417/cryptography/hazmat/bindings/_rust.pyd
    .dll windows:6 windows x64 arch:x64

    82014bce2da50af26d12bb198c8c2d6f


    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/libcrypto-1_1.dll
    .dll windows:6 windows x64 arch:x64

    91e8dc4192e6f620254cd1fa32253e23


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/libffi-7.dll
    .dll windows:6 windows x64 arch:x64

    3dc8b86d60f90a1851eee5f9dc191312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/libssl-1_1.dll
    .dll windows:6 windows x64 arch:x64

    2f472d9395bd5de322dac91610524932


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/pyexpat.pyd
    .dll windows:6 windows x64 arch:x64

    2ba9ffe0d37a6358b5626f9ea537e5d0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/python3.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • onefile_3368_133652613788244417/python39.dll
    .dll windows:6 windows x64 arch:x64

    5f25576b1014a343f42ea537d4f63fbd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/pythoncom39.dll
    .dll windows:6 windows x64 arch:x64

    9684807c635d36da2720331ebeda88bf


    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/pywintypes39.dll
    .dll windows:6 windows x64 arch:x64

    519b03ce289ae1d7efd01e45c4e65691


    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/select.pyd
    .dll windows:6 windows x64 arch:x64

    72c31dcbd1c124b3eb380163acfe8f06


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/unicodedata.pyd
    .dll windows:6 windows x64 arch:x64

    1020ee69c522eee9cc71cdcf6fac68fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/win32api.pyd
    .dll windows:6 windows x64 arch:x64

    b0132279533d01b07d2edd39be366b2b


    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/win32file.pyd
    .dll windows:6 windows x64 arch:x64

    c46cfb6f3c9b4bd36475d246277ad947


    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/zstandard/_cffi.pyd
    .dll windows:6 windows x64 arch:x64

    a4f663bc77d2671c859ff6226656a2fb


    Headers

    Imports

    Exports

    Sections

  • onefile_3368_133652613788244417/zstandard/backend_c.pyd
    .dll windows:6 windows x64 arch:x64

    6a07835642415b139bf9bcf206f1e0b9


    Headers

    Imports

    Exports

    Sections