19092024_0056_18092024_dekont[.]pdf[.]zip

General

Target
19092024_0056_18092024_dekont.pdf.zip
Size 589KB
Sample240919-bapweasdmd
SHA256 e6e88a66deba0d9ed4021c491814969707034b0d459bb3144870d98b083131ba
MD5 b637c098c8cc6934e1487907553b00b6
SHA1 881ad773707a6713a6960e9348c052f6c9be7645
SHA512 7ea783f1b9f96c59ea0b9ef880fda8685f8db57a825ccbb3a23018d4343f0364dff12e64ebf9dd73a2cfcc85d91f87d89baaf7a5261fc195660038ecbb9abd23
SSDEEP 12288:tDCzWf4Y0nBvCktKnRRe9kPMkAniIGtBaVOsp79TjC84GJZALOiSn95r30SA:JuWfRABakthaMkETGfawsaUZ4430R
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/rlxJk85y4E3Cu8R.exe

File Explorer

19092024_0056_18092024_dekont.pdf.zip

.zip 589KB
rlxJk85y4E3Cu8R.exe

.exe 797KB

19092024_0056_18092024_dekont.pdf.zip

SHA256 e6e88a66deba0d9ed4021c491814969707034b0d459bb3144870d98b083131ba
MD5 b637c098c8cc6934e1487907553b00b6
SHA1 881ad773707a6713a6960e9348c052f6c9be7645
SHA512 7ea783f1b9f96c59ea0b9ef880fda8685f8db57a825ccbb3a23018d4343f0364dff12e64ebf9dd73a2cfcc85d91f87d89baaf7a5261fc195660038ecbb9abd23
SSDEEP 12288:tDCzWf4Y0nBvCktKnRRe9kPMkAniIGtBaVOsp79TjC84GJZALOiSn95r30SA:JuWfRABakthaMkETGfawsaUZ4430R
MD5 SHA1 SHA512 SSDEEP

Password

infected

rlxJk85y4E3Cu8R.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 812d0912e299dbe0eff0078fcced87ffe5762b103a974dd19cdbb4c21294a193
MD5 4be5e463d0add883315a162191a36a4d
SHA1 2a23189d3da383aa49c07ca7e05bb943813662a1
SHA512 415a570ea23d12ca8d5f1d597f8373ffc4e57d05145c2a0666519a8b53852c2bd62895a7569abb2aeb8b5109434afe056129aa48124d0b10e147eab5a0c07435
SSDEEP 12288:DuEcsm04vbBoaGoE80Dir+hOsh79T3C8yG3ZAmwIDH2yZPZ6b1ID:1ct04+sE8wir+0s0wZ7D61ID
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

822194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

VOql.pdb

19092024_0056_18092024_dekont.pdf.zip

rlxJk85y4E3Cu8R.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

19092024_0056_18092024_dekont.pdf.zip

rlxJk85y4E3Cu8R.exe

mscoree

dotnet