4b4ac217ceb7224d712f2c8d6d3372cf5f581ab737af1d88f0b0e1b7731f3f07[.]zip

General

Target
4b4ac217ceb7224d712f2c8d6d3372cf5f581ab737af1d88f0b0e1b7731f3f07.zip
Size 223KB
Sample260507-psa2vsd12s
SHA256 0587795234bfb05c2d9651aa572b2cb0ed3791e60f5cf0948b50a1fe34e587ee
MD5 12b8eeea605fe1f19997779e5d9e9bc6
SHA1 6d797a3f5a3d60c07a175a0a78be691ec2007dd5
SHA512 21c078378bde3d91652bd9d443aa94e5a3cd0d68a4ffed96472cb6134edba30897bff5dabb234e5b584562e885e22bd5fa47d7f427519b1f4973ad9f09530d9f
SSDEEP 6144:ySHDhYGlEmOqyHeh0b1VTDasi9LeazzCqGBaeN8St4u3f3dvos:ySHDhYGWBqYtpVTWv9LeazuLBas8StjH
TLSH
T1072423704A484FA38B275C99762ADB8C226CCD24DDD9566CCE027D6B0563DB0ECF9723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4b4ac217ceb7224d712f2c8d6d3372cf5f581ab737af1d88f0b0e1b7731f3f07.exe

File Explorer

4b4ac217ceb7224d712f2c8d6d3372cf5f581ab737af1d88f0b0e1b7731f3f07.zip

.zip 223KB
4b4ac217ceb7224d712f2c8d6d3372cf5f581ab737af1d88f0b0e1b7731f3f07.exe

.exe 593KB

4b4ac217ceb7224d712f2c8d6d3372cf5f581ab737af1d88f0b0e1b7731f3f07.zip

SHA256 0587795234bfb05c2d9651aa572b2cb0ed3791e60f5cf0948b50a1fe34e587ee
MD5 12b8eeea605fe1f19997779e5d9e9bc6
SHA1 6d797a3f5a3d60c07a175a0a78be691ec2007dd5
SHA512 21c078378bde3d91652bd9d443aa94e5a3cd0d68a4ffed96472cb6134edba30897bff5dabb234e5b584562e885e22bd5fa47d7f427519b1f4973ad9f09530d9f
SSDEEP 6144:ySHDhYGlEmOqyHeh0b1VTDasi9LeazzCqGBaeN8St4u3f3dvos:ySHDhYGWBqYtpVTWv9LeazuLBas8StjH
TLSH
T1072423704A484FA38B275C99762ADB8C226CCD24DDD9566CCE027D6B0563DB0ECF9723
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

4b4ac217ceb7224d712f2c8d6d3372cf5f581ab737af1d88f0b0e1b7731f3f07.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4b4ac217ceb7224d712f2c8d6d3372cf5f581ab737af1d88f0b0e1b7731f3f07
MD5 f9eed716d1b05328ce119613b98ad8c3
SHA1 5e51f7096a418c6c1a10a8484b6403886477ec9b
SHA512 64e2b5b66611d9f0d7955a28ce11f60943274fb5e72af55f8b663b85c5729487dbd19e33abbfc5e8c78b82aba6d6ee679f3ec22c45134c8a51c022a5d771d528
SSDEEP 12288:JQWoAzlUL0TG4oux8unp729A5O0TSzA2flh:uWoAJULZ4ouT29AjKRh
TLSH
T188D45A12FFE49517D5AF337DA4E2071A53B0E48AB252FB8F258497A91D83F844C01BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

591966

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB paths

G:\Suffocate-safety.pdb

4b4ac217ceb7224d712f2c8d6d3372cf5f581ab737af1d88f0b0e1b7731f3f07.zip

4b4ac217ceb7224d712f2c8d6d3372cf5f581ab737af1d88f0b0e1b7731f3f07.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

4b4ac217ceb7224d712f2c8d6d3372cf5f581ab737af1d88f0b0e1b7731f3f07.zip

4b4ac217ceb7224d712f2c8d6d3372cf5f581ab737af1d88f0b0e1b7731f3f07.exe

mscoree

dotnet