Resubmissions

03/10/2024, 10:01

241003-l19nlszenb 10

03/10/2024, 09:59

241003-lz8pxswgll 10

General

  • Target

    19261938997.zip

  • Size

    9.3MB

  • MD5

    c5a304eba27f3ce323d5dc7c10e61406

  • SHA1

    b457e2f0a10d91e234e2093e673ca076f5c662c1

  • SHA256

    612a77a324739732b2a383796b60a804c09df80dd891e5e329f6f6bb3a73a785

  • SHA512

    d0d300bd38517fb3dff54298f8f34bc939a9b89360f236d67cd3774a855caa78b4d5c2083cc8c1f95c4c2cd65744fabb216670a31ece22d09e6242c1afed2a42

  • SSDEEP

    196608:V3x3iLK4+jnVK0mFjw2K+WBp37tcEkyKZ4wDeJF4g7yn85TjI2:HSLKDmi2K+4ZiEkqJa85TM2

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 19261938997.zip
    .zip

    Password: infected

  • 64ad3267203840c50f74e5a1299857333efe99dde845aa5f73373d5acb123610
    .zip

    Password: infected

  • 0WFHSetup.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected

    1aae8bf580c846f39c71c05898e57e88


    Headers

    Imports

    Sections

  • AppointmentApis.dll
    .dll windows:10 windows x64 arch:x64

    Password: infected

    37ea5bc26bf34b464718f6cebb2849d2


    Headers

    Imports

    Exports

    Sections

  • Microsoft.PowerShell.Commands.Utility.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • WINSSNAP.DLL
    .dll windows:10 windows x64 arch:x64

    Password: infected

    1b05a286c255eb22d1143fa1c05b9d98


    Headers

    Imports

    Exports

    Sections

  • WMADMOD.DLL
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: infected

    3843935862382fc6903ebaa7c00bd5cd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WMADMOE.DLL
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: infected

    a87320ede89e3eba1b5aafaa24fb3c60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WSDApi.dll
    .dll windows:10 windows x64 arch:x64

    Password: infected

    41cb8788b6b067087aa4e1fb215e80e8


    Headers

    Imports

    Exports

    Sections

  • appraiser.dll
    .dll windows:10 windows x64 arch:x64

    8f6d243eac64aa44dba47e2009e0033a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wlanpref.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    080890b09d1fb2411ed096cb5140b1b8


    Headers

    Imports

    Exports

    Sections

  • wlidcli.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    9fedd0e4c01324ab04eb22ff6f7cb491


    Headers

    Imports

    Exports

    Sections

  • wxmsw32u_xrc_gcc_custom.dll
    .dll windows:4 windows x64 arch:x64

    61f52898006c9551a4c4108c1f7e8236


    Code Sign

    Headers

    Imports

    Exports

    Sections