NEW ORDER[.]7z | Triage™

General

Target
NEW ORDER.7z
Size 524KB
Sample251006-k62drasmx3
SHA256 b0d3d3ec4af2add2287b495f34c6db1ce58107fb4e8bc979b5c1a9bd97b64ddd
MD5 52a653bf5f8f10619d60cdd416d06800
SHA1 4a5e8afcfd8c285a752ead22768f9d3864b1f9cf
SHA512 81f25d6e978e13b96aaeb366667f2d3c2b65b7ddecbe96d06a76c95bfcc7d4e46fc2f1e3f664e20153f1fc97a3ccefd69db6c039dc8daa0d081b1679b50f8e5b
SSDEEP 12288:2IwdN/kvANi7NUTZO3u4Ai7w/ZoNVIJDELDOYBaPYersv5W:MBkvAN5ZO3u4AD6NVIiWYmrx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Jwwmw0R4IrCFVXo.exe

File Explorer

NEW ORDER.7z

.7z 524KB
Jwwmw0R4IrCFVXo.exe

.exe 561KB

NEW ORDER.7z

SHA256 b0d3d3ec4af2add2287b495f34c6db1ce58107fb4e8bc979b5c1a9bd97b64ddd
MD5 52a653bf5f8f10619d60cdd416d06800
SHA1 4a5e8afcfd8c285a752ead22768f9d3864b1f9cf
SHA512 81f25d6e978e13b96aaeb366667f2d3c2b65b7ddecbe96d06a76c95bfcc7d4e46fc2f1e3f664e20153f1fc97a3ccefd69db6c039dc8daa0d081b1679b50f8e5b
SSDEEP 12288:2IwdN/kvANi7NUTZO3u4Ai7w/ZoNVIJDELDOYBaPYersv5W:MBkvAN5ZO3u4AD6NVIiWYmrx
MD5 SHA1 SHA512 SSDEEP

Jwwmw0R4IrCFVXo.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4123bedccc18eee83aa4c7d8e1b64191ddde5fc234bd3c1cbd7f998571e47112
MD5 7daa0cbb2947346c2b8b44da29827b5a
SHA1 3fa28e125ed1dfca4b3eb8daf0ebc8dd1988a2c4
SHA512 f9df2cf686e91b653fbdbd8da95a03a6c6d8f8b2979042af1e086793ac55a713568378adfc3c475e40801f3ce20ed81a1fd1cbe2d7200341c31042cc4cd664d6
SSDEEP 12288:t9FCRJKEqvpNizNU/YOliGAi7uCDgNVIJDCLDHYBSfYen/N:t9qhqvpNfYOliGAUsNVIQfYul
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

579114

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

YLiP.pdb

NEW ORDER.7z

Jwwmw0R4IrCFVXo.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

NEW ORDER.7z

Jwwmw0R4IrCFVXo.exe

mscoree

dotnet