Resubmissions

13/09/2024, 13:59

240913-ragg2atdnf 8

13/09/2024, 13:55

240913-q77vtatcqc 8

General

  • Target

    malware.zip

  • Size

    121KB

  • MD5

    abaf4783b0757ec06b31251e980a1eaa

  • SHA1

    40b6f277c5d8c50d5e8007b498a92c2ff73b8029

  • SHA256

    98e0c1e5d2e8e25ff99029d2f76a45a1b320c8cf3349df45d02dcd4070c0f49f

  • SHA512

    74933dfa0a0cc46a40a71efdf30e57848d1130cbf00b44bd77bd58458d671d03916b1432bb2b062f9d076390283da7f89e4680fd7c32ea6f60be0533e6bd42b8

  • SSDEEP

    3072:+iRgX3TJXl/CvZmnm/S0kXIj4rq5rbSC4bpsFUUR28VfS:PWX3TJXsom/SVSGqvhc8tS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • malware.zip
    .zip

    Password: infected

  • locky sample/document_copy.js
    .js
  • locky sample/document_copy_payload.exe
    .exe windows:3 windows x86 arch:x86

    6c7a689fe4b26f0ecb3b07b4c974cb0b


    Headers

    Imports

    Sections

  • sample2/invoice.js
    .js