General

  • Target

    5132456s2.bat

  • Size

    726KB

  • MD5

    420ec722d368c827be0a307959f370a6

  • SHA1

    2932ed205ee2a08af3fa518de38355a67f49b50a

  • SHA256

    f585e6456d94d55f7066b196ae8d5032a7c3e7dd4ddf56c31c72fc0d3ad4fe3a

  • SHA512

    bd7efce77093a2d9861e51ce37bfae4c3ca199b851f419a3c4296abd3492b27737318b99de880d15601ee4aec38f8bf05cd2f79e898e2e8d9093bede900acdee

  • SSDEEP

    12288:0XZEFyI6M3BiMdgUB27X6SVn0GY5g0CeD43JZHVDwrG8qjWKsG4h8/zu8n8RPa+A:0XeFb6Een6S0GYBiRVmqjWJG4hchn8op

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5132456s2.bat
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    68b7023f8923dd087549802f8fa631c3


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/staalarbejders/Lovage.Sam51
  • $PROGRAMFILES/staalarbejders/quinazolin.Suk
  • Skmtevisers/Citronsafter.txt
  • Skmtevisers/Evalueringsrutines.fol
  • Skmtevisers/Helgener.und
  • Skmtevisers/blodserumernes.all
  • Skmtevisers/echapppqr.soc
  • Skmtevisers/primaterne.bal