General

  • Target

    68__alma_Sipari_i_Spesifikasyonu.zip

  • Size

    2.9MB

  • MD5

    a38fb31dd89ca1cd73997b2001fb9a2f

  • SHA1

    282fc6826169df89a9095990c78e22680e22c599

  • SHA256

    9fd19dc2cf698d99f77f584daf924f1e5aa5081be879ede156a33316f9ca8baf

  • SHA512

    8a4d3d394a24efdecf85b0ad1dd214a9c7daec54ee13e3a5715c1f943ea2dde0654a72c3043c645c482425f33f9a80d3e00f42bae4c10d2aef3646fedc69c9f6

  • SSDEEP

    49152:pMCUsL+tY1bInUxaxJMhStR8MuBjUGatz6uxkSZd7Az/DiCJ8RxsPTnI7ly7nX:CnsL+obInUI08f8TItz7xhZd7AzbDJ84

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 68__alma_Sipari_i_Spesifikasyonu.zip
    .zip
  • Satınalma Siparişi Spesifikasyonu.exe
    .exe windows:4 windows x64 arch:x64

    e4441488f05723f7e3d0b73e854b05f2


    Code Sign

    Headers

    Imports

    Sections

  • edit.dll
    .dll windows:6 windows x64 arch:x64

    7dd544086cc182033eed99e87d5ebafb


    Headers

    Imports

    Exports

    Sections

  • mscorlib.dll