General

  • Target

    visokie technologie gisni.exe

  • Size

    163KB

  • MD5

    fba7f56bd5fb9967f0411b4dba100edd

  • SHA1

    97cab17cd1fc36dd5d88786689ba9c07bdf0ade7

  • SHA256

    a703951b205118880e0f8741a26182d56cdedb0d8bc92b00f2a66e73ded9c462

  • SHA512

    cefd13f74896fa813f466982ce029f206dfb53a233c419eecbd7b90c0e3c825219dc116182581ae6cc9ed7887137a1fe77740273b52ca8a8c740c0f4f1e0ffd6

  • SSDEEP

    3072:YrwNhaIlF7zWZ24+nH+IofN2ywDHRp69ua6AD5r3uEjtQNNXpJDHKAxAIa6WqYMJ:YrmhaaF7zU+Hzo8H36F6G+I4ZJDHPWmV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • visokie technologie gisni.exe
    .zip

    Password: osTmMFXmE8JDG@cr

  • Device/HarddiskVolume6/Users/Administrator/Files/BackUps/Marina Files TO Delte/dom/knigi/visokie technologie gisni.exe
    .exe windows:1 windows x86 arch:x86

    Password: osTmMFXmE8JDG@cr


    Headers

    Sections

  • manifest.json