Overview

overview

10

Static

static

3

11f44531fb...to.dll

windows7-x64

3

11f44531fb...to.dll

windows10-2004-x64

3

11f44531fb...o1.dll

windows7-x64

3

11f44531fb...o1.dll

windows10-2004-x64

3

11f44531fb...71.xls

windows7-x64

10

11f44531fb...71.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6fab9a8-3dab-4bf8-a2cb-b955b0c00ce8-11f44531fb088d31307d87b01e8eabff.zip

  • Size

    106KB

  • MD5

    0193d7468c45f685e0d35941048bf2d6

  • SHA1

    90299163896f31a7c0e40b39eff12af7da9f109a

  • SHA256

    da7b606e8d29bbca692fb9bc56f36003b5ea4e27e62f90848559501155c23afd

  • SHA512

    c7849a84012ec1fc13825b37ae37c15b110a08849fcbaae47da1a827538751e62d0c8a2a08603eefb632f1bae85609ba4e41b70598e14eb1cd922c5cb28012b4

  • SSDEEP

    3072:W5flEj4FRq1o03jT+s554VXuR0eUuFZIHus9A:W/Ej4FR3In554A+eUu/eA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b6fab9a8-3dab-4bf8-a2cb-b955b0c00ce8-11f44531fb088d31307d87b01e8eabff.zip
    .zip

    Password: infected

  • 11f44531fb088d31307d87b01e8eabff.zip
    .zip

    Password: infected

  • 11f44531fb088d31307d87b01e8eabff/iroto.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • 11f44531fb088d31307d87b01e8eabff/iroto1.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • 11f44531fb088d31307d87b01e8eabff/research-1646684671.xls
    .xls windows office2003