General

  • Target

    20951876300.zip

  • Size

    11.7MB

  • MD5

    87269b56e90da7ece10380a2015e26d5

  • SHA1

    8f7a5d941df57eff64ae287da3b589b788eef893

  • SHA256

    d27b7d7734c4f718e09bdd9864771c821607a92b91deb0946c8808ee97a20e06

  • SHA512

    6aface7e8666d6abebe5b83a581249b308f9df69fdcd0511512b53f35f0c2ed88af50ef73d104cf4551ae406c02b1b415bdccee6274857599d23a7c5f1497e16

  • SSDEEP

    196608:p1IIsUyuJh2Xu/Y/tObDkmaDW9JX0ZG+aRKHNRIwqelbIFDV73ARZcq:p11jh2XiYtqD1aDWJXu66y75wR1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20951876300.zip
    .zip

    Password: infected

  • 21325dc19ac88a5b6a7f14f6222249cd5f62c05d787999983fc5ad73e0e1c726
    .7z
  • New folder/ElbyCDIO.dll
    .dll windows:5 windows x86 arch:x86

    cb5f14e025f6fc6949c0a460bca769be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • New folder/ElbyVCD.dll
    .dll windows:4 windows x86 arch:x86

    ee96c0a1a551a58603cf4b2e5e1d56bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • New folder/Set-up.exe
    .exe windows:4 windows x86 arch:x86

    439cea087ae2b8ad67a7f8437f6bbbbe


    Code Sign

    Headers

    Imports

    Sections

  • New folder/bffdfro
  • New folder/libtika.dll
    .dll windows:4 windows x64 arch:x64

    774ecab07074620bb9b400a5ddde5f2b


    Headers

    Imports

    Exports

    Sections

  • New folder/yaibli