General

  • Target

    1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252.zip

  • Size

    1.0MB

  • MD5

    51feca3c49e7b0323133e85716a28a3a

  • SHA1

    15940747af57b5a6c2d722c37dc885f45ed665dc

  • SHA256

    1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252

  • SHA512

    cc11186b882a6ff81e4f2df0f2013d2ccf102076fc33911455eef0bb1724515e921a075b9567b7bafc7f269bd53145a5862d3114e57292cee0bf364527ec9a38

  • SSDEEP

    24576:TGy1nGpZC0OG9vMcLFkyOgncQce6XFdi+J72i9gnwPF:T3UpkRG99LFkyFGeiF8+J71i2

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://edition.cnn.com/

Signatures

Files

  • 1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252.zip
    .appx
  • AppxBlockMap.xml
    .xml
  • AppxManifest.xml
  • AppxMetadata/CodeIntegrity.cat
  • AppxSignature.p7x
  • Assets/logo.png
    .png
  • MYPIntkPkondCCoYfHjXt.ps1
    .ps1
  • PsfLauncher32.exe
    .exe windows:6 windows x86 arch:x86

    7b63f97e8f0c360699c20e7c30842630


    Code Sign

    Headers

    Imports

    Sections

  • PsfLauncher64.exe
    .exe windows:6 windows x64 arch:x64

    8e9b7caff9376bbdc8b416a414b64656


    Code Sign

    Headers

    Imports

    Sections

  • PsfRunDll32.exe
    .exe windows:6 windows x86 arch:x86

    b1a931f51b30b56b60ecdb5d25bf3458


    Code Sign

    Headers

    Imports

    Sections

  • PsfRunDll64.exe
    .exe windows:6 windows x64 arch:x64

    0e5c9a29fdcee2791341cd303678be64


    Code Sign

    Headers

    Imports

    Sections

  • PsfRuntime32.dll
    .dll windows:6 windows x86 arch:x86

    f229992937d1d790b50a1cb368509a49


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PsfRuntime64.dll
    .dll windows:6 windows x64 arch:x64

    de350c6095b02fd305afdbe337b14afd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Registry.dat
  • Resources.pri
  • StartingScriptWrapper.ps1
    .ps1
  • User.dat
  • VFS/ProgramFilesX64/PsfRunDll64.exe
    .exe windows:6 windows x64 arch:x64

    0e5c9a29fdcee2791341cd303678be64


    Code Sign

    Headers

    Imports

    Sections

  • [Content_Types].xml
    .xml
  • config.json