01072025_0559_30062025_PO[.]zip

General

Target
01072025_0559_30062025_PO.zip
Size 665KB
Sample250701-gpranseq5v
SHA256 1b7b2b312e516e269db70df333a5730d4088a065bbd2c11e76d32c7bad075822
MD5 28d518255b33f323a78869a356f33181
SHA1 957bdf32f2b6a1e6c06181eef09fb1e1611dd7ee
SHA512 3ed25d1868737ac9173542f72ed67336c05425488d6a4673f865ebfeb56f1ba82357a865cdc778d2d2692ae47090262b8208f54b283650f6002f5ac6054a0d88
SSDEEP 12288:rcdqHNxOQeHrbyFz9yoBJmjo3i0q2Q420bk/wLAEjzkh+WBJNLiszQEG5asBhowR:3XOVXyFRcX200XAwkEG9RUvByR6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO.exe

File Explorer

01072025_0559_30062025_PO.zip

.zip 665KB
PO.exe

.exe 724KB

01072025_0559_30062025_PO.zip

SHA256 1b7b2b312e516e269db70df333a5730d4088a065bbd2c11e76d32c7bad075822
MD5 28d518255b33f323a78869a356f33181
SHA1 957bdf32f2b6a1e6c06181eef09fb1e1611dd7ee
SHA512 3ed25d1868737ac9173542f72ed67336c05425488d6a4673f865ebfeb56f1ba82357a865cdc778d2d2692ae47090262b8208f54b283650f6002f5ac6054a0d88
SSDEEP 12288:rcdqHNxOQeHrbyFz9yoBJmjo3i0q2Q420bk/wLAEjzkh+WBJNLiszQEG5asBhowR:3XOVXyFRcX200XAwkEG9RUvByR6
MD5 SHA1 SHA512 SSDEEP

Password

infected

PO.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 ebacd47d8d9c76fbc8e7f1c2d4768f5db3911ce8374ac2a704223c7c302b6998
MD5 494ff9dd49ad6adaf5311211433596a1
SHA1 e80d0dde6967f2a367da42d3518a5123bce5cba9
SHA512 63c3f463c2b186789f36c42d8c34854afb6155d4d7b5932891fa558cb18ec8069ab631319cda93358f0e36b808f315b593de47ba7f1b78195fe20fb640c61aee
SSDEEP 12288:nndOVNxOCeHmZWFdT89XOAM8LrQFUwcbq/wLOEjFUh+J9QdX5Vj4jb:UdOTfj4VYYFOwUEJ2dLj4jb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

747398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Hilh.pdb

01072025_0559_30062025_PO.zip

PO.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

01072025_0559_30062025_PO.zip

PO.exe

mscoree

dotnet