Overview

overview

10

Static

static

3

JUSTIFICAN...IA.exe

windows7-x64

7

JUSTIFICAN...IA.exe

windows10-2004-x64

10

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

8

Spenderende.ps1

windows7-x64

3

Spenderende.ps1

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JUSTIFICANTEDETRANSFERENCIA.exe

  • Size

    663KB

  • MD5

    8f1a27ff7db3072c7f430280163c75ef

  • SHA1

    b422d8f3aef50c91e6f7ce51a9d9401f34c96762

  • SHA256

    8bfd788dcf61676b05f3c70f1641d769311121dc181c923f20407d00b15d9a56

  • SHA512

    6a3eaf4bcceadd2cfa99e95bcab34778003ffe7450502727e4e24c594f339b066aed154bdaea62286bc4e838c244a14e4aa4505e6c4046b5d0845979ee84d8a9

  • SSDEEP

    12288:7PCMC15K0rytq1sPAZNHOsariPxkXZ3Aka+R15Skemda90xTB:7CM8V+tsZNHXariPxkX+kDLgkem1xV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • JUSTIFICANTEDETRANSFERENCIA.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    46f8b6973f33717335c0f6d8087de67b


    Headers

    Imports

    Exports

    Sections

  • Achromatizable.jpg
    .jpg
  • Anatema.txt
  • Fuldstndiggjordes.jpg
    .jpg
  • Skovbrugserhverv.Heg
  • Spenderende.Qui
    .ps1
  • eskapisters/Grillage249.txt
  • eskapisters/Sprller125/sporogonia.dis
  • eskapisters/Tatovererne.ini
  • eskapisters/bidronningerne.jpg
    .jpg
  • eskapisters/bulletinboard.ini
  • eskapisters/cyanocobalamin.txt
  • eskapisters/dampkoge.jpg
    .jpg
  • eskapisters/estrogenically.sik
  • eskapisters/opgavebgerne.txt
  • eskapisters/paahngenes.ini
  • eskapisters/smrskeers.sup
  • eskapisters/spiseseddelen.txt