General

  • Target

    sewc7l.zip

  • Size

    3.0MB

  • MD5

    acfcd98c9c5726fb264d43571c0f132f

  • SHA1

    bd05ff5be1a22d121a351b08070f02c6827f2dfe

  • SHA256

    020b13561e6ae6e12444e42ab24db76f54bd75eb8a999aefbfeecdf529629376

  • SHA512

    6bacad39ab9034a6c74dae9e0dcfb66ba963bdff65cd311be6028abce25741f8b7f30304d1d9abb27a41343312f66bcd84a3eed819cee90d685c01a49d3ede05

  • SSDEEP

    98304:7lpr9TSGbWrTXDUwMjLACHj1z1DUrXWH5tJsf:7lLT5bW/zUHPAcj1mX05tC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • sewc7l.zip
    .zip

    Password: infected

  • ud until battlebus/Fortniture.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    198e8550ef7fa818f336fe7f036674d8


    Headers

    Imports

    Sections

  • ud until battlebus/driver.sys
    .sys windows:10 windows x64 arch:x64

    1b7817761e53a790c0c5c172816af170


    Headers

    Imports

    Sections

  • ud until battlebus/strnmap.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    0d759af411dbbce5e0cf8cbe4564ec03


    Headers

    Imports

    Sections