VixenExternal[.]zip

General

Target
VixenExternal.zip
Size 43.8MB
Sample241205-d82c7ssrcm
SHA256 60a60aa74911af0c1d4e093605bb5835e9877c33a5b057aea4a55d45462c9145
MD5 7d4d5a3200b1cb366e53699bf7b5d7f8
SHA1 9f1f9966839d2e560705b1c7af95b8a9f611ca3b
SHA512 4d74e4d80984905950212b2177c06824568a1a5a133e9a482f96cd9bf56bbefa452a3229ca5bb3cd9cc2d87b74f7677054a286444bfb7c356ff3319ac142b8b9
SSDEEP 786432:ZgYA776WycvrwE3SBu96FowofcWIz5gmvO8p2mj8j6ZIjTPBvmRnFvdnVjRUCDh9:ZcSWLDwE3OFowoUFzSR8Fw+IfMmchBkA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/VixenExternal/VixenLoader.exe

File Explorer

VixenExternal.zip

.rar 43.8MB
VixenExternal/VixenLoader.exe

.exe 44.0MB

VixenExternal.zip

SHA256 60a60aa74911af0c1d4e093605bb5835e9877c33a5b057aea4a55d45462c9145
MD5 7d4d5a3200b1cb366e53699bf7b5d7f8
SHA1 9f1f9966839d2e560705b1c7af95b8a9f611ca3b
SHA512 4d74e4d80984905950212b2177c06824568a1a5a133e9a482f96cd9bf56bbefa452a3229ca5bb3cd9cc2d87b74f7677054a286444bfb7c356ff3319ac142b8b9
SSDEEP 786432:ZgYA776WycvrwE3SBu96FowofcWIz5gmvO8p2mj8j6ZIjTPBvmRnFvdnVjRUCDh9:ZcSWLDwE3OFowoUFzSR8Fw+IfMmchBkA
MD5 SHA1 SHA512 SSDEEP

VixenExternal/VixenLoader.exe

IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
SHA256 6d8b2f6d80ee783788c63d2428e1707a99cacd8cc2e3daf8c8d3c394b6f6f8bd
MD5 07c2ff366c0b16862e6ca03dfcc94428
SHA1 9c29ee175d18edb1478e6074cbf123fe655684f0
SHA512 40bec9b10392836be19a167e2140f4044a9a72f76345c7b84472446814738d261173f2ed12387dcace104068309416a22b7390330331337365188cb9c5a3cbe5
SSDEEP 786432:Jo1IpD9h6HHveoo3Zl/xvj44b2Lr1rcSr+oy3Mao+8vUQDcpLlylA:Jo1EhQHHveoSZRxp2Lrj+oyjocQw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5237

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

VixenExternal.zip

VixenExternal/VixenLoader.exe

msvcrt

shell32

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

VixenExternal.zip

VixenExternal/VixenLoader.exe

msvcrt

shell32

kernel32

generic