7acba4ec24668bc2faf1debee8191fad[.]zip

General

Target
7acba4ec24668bc2faf1debee8191fad.zip
Size 225KB
Sample240831-c88lva1fpd
SHA256 0a717b7bd76392f57fd635837161e29a215524908acaf5ee78efdeb1da49fc31
MD5 2cfe040eeceaa93f2acef3ef5d7b0eaf
SHA1 9c366c34a564bb0186167bc3bbc69fc73f502ed7
SHA512 d172e8f681b93b8fddc13fa3e4721f72a4c1f616b85df503403fdad4374628cdddc8456acd47d184031487a39a73a6283c605a95e71dd6ce87b9fa5a8a8a1274
SSDEEP 6144:41LInfMj4xsBLMDHWSEr//3w85ZkHlCH5V+Maaj:41LmpqzrXZ9HBj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/816c594929cb406f430b4312f3f1642ea718717663047c971b0a3ef12c13c64c

File Explorer

7acba4ec24668bc2faf1debee8191fad.zip

.zip 225KB
816c594929cb406f430b4312f3f1642ea718717663047c971b0a3ef12c13c64c

.exe 384KB

7acba4ec24668bc2faf1debee8191fad.zip

SHA256 0a717b7bd76392f57fd635837161e29a215524908acaf5ee78efdeb1da49fc31
MD5 2cfe040eeceaa93f2acef3ef5d7b0eaf
SHA1 9c366c34a564bb0186167bc3bbc69fc73f502ed7
SHA512 d172e8f681b93b8fddc13fa3e4721f72a4c1f616b85df503403fdad4374628cdddc8456acd47d184031487a39a73a6283c605a95e71dd6ce87b9fa5a8a8a1274
SSDEEP 6144:41LInfMj4xsBLMDHWSEr//3w85ZkHlCH5V+Maaj:41LmpqzrXZ9HBj
MD5 SHA1 SHA512 SSDEEP

Password

infected

816c594929cb406f430b4312f3f1642ea718717663047c971b0a3ef12c13c64c

IMPHASH fca1d58205e9c77175b87324501ec95c
SHA256 816c594929cb406f430b4312f3f1642ea718717663047c971b0a3ef12c13c64c
MD5 7acba4ec24668bc2faf1debee8191fad
SHA1 89f2970dedaa7f7b603aff4af87b188253f93f5d
SHA512 4386ca114d8bcc3d18a9f4cdace5c6dc6193d956f60eead3a1432388ce98d22c3436cdf6cb104f7481e6d4e2a744dc3f42b90ebe77e843ea46d6c89ab41abdee
SSDEEP 12288:6DAViFHMIqcUqm6G6XUIiNHsjTnEZ5mUR27MsU:TtqmgkIRj4yTU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

1

Major OS version

5

Entry point

192688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vikefuxahazor.pdb

kernel32

ExitProcess GetEnvironmentVariableW FileTimeToDosDateTime CreateTimerQueue SearchPathW GetCPInfo InterlockedDecrement GetSystemWindowsDirectoryW AddConsoleAliasW FlushViewOfFile FreeEnvironmentStringsA OutputDebugStringW LoadLibraryW GetSystemWow64DirectoryW SetSystemTimeAdjustment GetModuleFileNameW CreateActCtxA CompareStringW lstrlenW GetStartupInfoW OpenMutexW FindFirstFileExA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress SetVolumeLabelW SearchPathA _hwrite OpenWaitableTimerA RegisterWaitForSingleObject LocalAlloc SetConsoleOutputCP SetCurrentDirectoryW WriteProfileSectionW AddAtomA GetModuleFileNameA WTSGetActiveConsoleSessionId CreateIoCompletionPort GetModuleHandleA QueryMemoryResourceNotification FreeEnvironmentStringsW RequestWakeupLatency FillConsoleOutputAttribute SetProcessShutdownParameters GetVersionExA DeleteFileW CloseHandle CreateFileW InterlockedIncrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineW HeapSetInformation RaiseException GetModuleHandleW GetLastError WriteFile GetStdHandle IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapValidate IsBadReadPtr OutputDebugStringA WriteConsoleW GetFileType QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount TlsAlloc TlsGetValue TlsSetValue TlsFree HeapCreate GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind MultiByteToWideChar WideCharToMultiByte LCMapStringW GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetMessageTime

Sharing