General

  • Target

    1c31070ab70382fa0e6d210f303d3c82.zip

  • Size

    637KB

  • MD5

    e22a49e9631760f98f0571e6b019461b

  • SHA1

    541d5ac55c201b99bf1bbaeb94b75cf7d2261cbf

  • SHA256

    1fb340aa98062b8b1b2411d342b9448bd649ee1f921571f587d08545ed9e9868

  • SHA512

    2ee241ed414f9c6983fc800169d356003d035368b242f8a1eaa589fdd5f3f6c96bce80701780b82e2b7ddefd74308e038d9b8300f74fd4bfd9d7b6bd63f91d64

  • SSDEEP

    12288:tY185vEf1GpyZdqMp1BUZMTdz5M5i38U729o47RvvCPOAmQsckmsMeMwszXQd+gv:m6vEf2yvqMv0MTdzKKHQxV4OnDKxzXQ5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c31070ab70382fa0e6d210f303d3c82.zip
    .zip

    Password: infected

  • 1c31070ab70382fa0e6d210f303d3c82
    .zip

    Password: infected

  • Shipping Documents PO 6000056995/Shipping Documents PO 6000056995.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections