26072024_0249_DOCMANGLOEUDHDKFI192461285901459370142836954352649435465765[.]zip

General

Target
26072024_0249_DOCMANGLOEUDHDKFI192461285901459370142836954352649435465765.zip
Size 1.4MB
Sample240726-da27vavdnf
SHA256 8e746957ef98a98e2256e7816fce3aaf25aad3411dc4743de943bc55285079e7
MD5 d49640ba0540b79c298aea58a66d4a35
SHA1 e8c7160a6f36696d685f7e1d44193e00eeaa17e1
SHA512 7090b377a3a1ed00d31fe16c2adc9202367ec17ed14cbbd9e2f71bd112f17a7752578d21174c5718b38c38c95967d0db083f534bb31bac9847b23b6c05801905
SSDEEP 24576:b3BlvSORqC0IViDDU4wcCB94jRMP+0jUE8JgKu2b7hjIWiMmwROlhRIx:b3Du1pDDU4QBGjqP+qAJgi7hkWiMd0lu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DOCMANGLOEUDHDKFI192461285901459370142836954352649435465765.exe

File Explorer

26072024_0249_DOCMANGLOEUDHDKFI192461285901459370142836954352649435465765.zip

.zip 1.4MB
DOCMANGLOEUDHDKFI192461285901459370142836954352649435465765.exe

.exe 1.5MB

26072024_0249_DOCMANGLOEUDHDKFI192461285901459370142836954352649435465765.zip

SHA256 8e746957ef98a98e2256e7816fce3aaf25aad3411dc4743de943bc55285079e7
MD5 d49640ba0540b79c298aea58a66d4a35
SHA1 e8c7160a6f36696d685f7e1d44193e00eeaa17e1
SHA512 7090b377a3a1ed00d31fe16c2adc9202367ec17ed14cbbd9e2f71bd112f17a7752578d21174c5718b38c38c95967d0db083f534bb31bac9847b23b6c05801905
SSDEEP 24576:b3BlvSORqC0IViDDU4wcCB94jRMP+0jUE8JgKu2b7hjIWiMmwROlhRIx:b3Du1pDDU4QBGjqP+qAJgi7hkWiMd0lu
MD5 SHA1 SHA512 SSDEEP

Password

896537

DOCMANGLOEUDHDKFI192461285901459370142836954352649435465765.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5bf3776166740f64879e1071a54267e70c53bd72856f74f71a1e5c8e72138446
MD5 72238a6294d8fef681a753d016d3af66
SHA1 9319816cff4c484238d521fa52c52c41491bfd99
SHA512 03370c451b2159eb1cbfd995d4a9d98eacd3b178d22b31b2972e9287350b5a2b40c689438d4a258434c1e8a865612401636db7a2ef41982b1253fbd9905a8f00
SSDEEP 24576:S4tIRuKO8VB4ZWR4wkEQV7DGsIKa26u41K/HqOdvn4WzJWjuj5L:SyB8syrRCqWL6psHqOB4Wze25
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

896537

Minor OS version

0

Major OS version

4

Entry point

1532254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

26072024_0249_DOCMANGLOEUDHDKFI192461285901459370142836954352649435465765.zip

DOCMANGLOEUDHDKFI192461285901459370142836954352649435465765.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

26072024_0249_DOCMANGLOEUDHDKFI192461285901459370142836954352649435465765.zip

DOCMANGLOEUDHDKFI192461285901459370142836954352649435465765.exe

mscoree

dotnet