Overview

overview

10

Static

static

3

C24TAA-003...PH.exe

windows7-x64

10

C24TAA-003...PH.exe

windows10-2004-x64

10

Resubmissions

17-01-2025 08:33

250117-kf35nazkfr 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20751840297.zip

  • Size

    753KB

  • MD5

    33350ad9d6d5ea005771c7d13c10f6ce

  • SHA1

    bd2966a8733e7dbc1a5ddaff7a77ad0bd0daccf7

  • SHA256

    f62c28f46869e0723b2760ff79f84fe75f1f8ef938bff3cfdf21836fc0efebfc

  • SHA512

    7c8139fc5bc879f517b708c7d60d4dd5ca0e4611342b3c3882a12260d619510f21c21f391c274d19e21917cd878899684a5418e80f6d52c605927c0b4651c569

  • SSDEEP

    12288:f4G22BCKs28awDXeMfrLH21mco+RR181NA5pKGDn3QDZKHX8Sb5BGjTeQ5XV9rL1:f4CCKsRhHrLW1mw18PAOd8X+2Q5lP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20751840297.zip
    .zip

    Password: infected

  • cc029716766cadc188f255877d5b1e643649b456048d8856ef0a4738f1eca9a2
    .msg

    • http://Bkav.com.vn/eHoadon

    • http://ehoadon.vn/hdpb6a

    • http://ehoadon.vn/hdpb6a)

    • http://phaplyhd.eHoadon.vn

    • http://phaplyhd.ehoadon.vn

    • http://tracuu.ehoadon.vn

    • https://tracuu.ehoadon.vn/WEM0G8XYGD3

    • https://van.ehoadon.vn/DLXML?InvGUID=fb34244f-3e08-499d-91c8-ebf501c101ff&FName=C24TAA-00343127-WEM0G8XYGD3-DPH

    • https://van.ehoadon.vn/DLXML?InvGUID=fb34244f-3e08-499d-91c8-ebf501c101ff&FName=C24TAA-00343127-WEM0G8XYGD3-DPH

    • Show all
  • C24TAA-00343127-WEM0G8XYGD3-DPH.gz
    .gz

    Password: infected

  • C24TAA-00343127-WEM0G8XYGD3-DPH.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections