Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte[.]zip

General

Target
Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.zip
Size 143KB
Sample241001-n4fk2ssbnd
SHA256 8e92d8fceeb46aca5a68382cee43e56019424a6adc0ac9b5217fc19c7873b643
MD5 a3e37b9ede0859ef90e35ca8bfff866d
SHA1 1d0e3307b906cc8ea1be986a44978e8a53254b3f
SHA512 5409a28577dad9bb0afe3a4a512b9ed56d2afbf393f57d3e55a46c087e35b23030bc8a93a4ce58a93790052bf1cba363d9b5a5e072c2b87bfbc291fc608075e0
SSDEEP 3072:DVyezYfNfvLcZuCmJc6ETvd67OrTyNqfgKnUH6Rw0roews:5y9fv8uFJc6ETvS9Abns6S0roews
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.exe

File Explorer

Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.zip

.zip 143KB
Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.iso

.iso 302KB
Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.exe

.exe 241KB

Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.zip

SHA256 8e92d8fceeb46aca5a68382cee43e56019424a6adc0ac9b5217fc19c7873b643
MD5 a3e37b9ede0859ef90e35ca8bfff866d
SHA1 1d0e3307b906cc8ea1be986a44978e8a53254b3f
SHA512 5409a28577dad9bb0afe3a4a512b9ed56d2afbf393f57d3e55a46c087e35b23030bc8a93a4ce58a93790052bf1cba363d9b5a5e072c2b87bfbc291fc608075e0
SSDEEP 3072:DVyezYfNfvLcZuCmJc6ETvd67OrTyNqfgKnUH6Rw0roews:5y9fv8uFJc6ETvS9Abns6S0roews
MD5 SHA1 SHA512 SSDEEP

Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 ca8b35b761afc85f5620cdc1db912c3033ac5a0b52a374df33da6cca712ac7be
MD5 586dbaba94a3a3c5fb48de7093230097
SHA1 0567f12decef5af013069365977fc10b520b8cf4
SHA512 95a8510a7c851cc41f1bbdf34b9061f693ca657996ff3250f9a85ee86d074076b51915bcfa226b91f46e3402fded2fa68f5fe68a2fbe1b4da0135419aaa8cd39
SSDEEP 3072:JAt7wVKam4Jn//vEkx1kbRmvcIETXdY7OrTqNqlgKnUH6Rw0jEAmjc+U:CWFebUvcIETX0rUbns6S0jEAmg+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

184318

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

OCT1.pdb

Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.zip

Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.iso

Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.zip

Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.iso

Swedbank_Maksājums_Swiftcopy_28-09-24_Deloitte.exe

mscoree

dotnet