b59bb12e[.]zip | Triage™

General

Target
b59bb12e.zip
Size 997KB
Sample260608-p33jvset8v
SHA256 d52c12fc70f57659bfa4fa777db89e261b6c50cbb335f324afe077927be5463b
MD5 fac35bfa475df147da05e31bdbab062a
SHA1 22813bce5db73425cc7a9f14d72fdb409fd8a476
SHA512 772476cd51bb78de63764b03734360c80e4af9f8dee01f6dae1f8e255af404c5b164f99899804f6b3edecda1f1178957f6ab35fd92ec3494a6a1b515ff501e87
SSDEEP 24576:Qb5pbHXdoZjv8tBvHb5CIN8LuGWI1w4xcVUKHBXQb3RtuyG:Q1lXdOv8td7EIqrWowpLkhYb
TLSH
T1AD2533738EC68A4CC47E01E834984594AADDEB7BA283E29ED430BFDBF4543532ACD554
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b59bb12e.dll

File Explorer

b59bb12e.zip

.zip 997KB
b59bb12e.dll

.dll 2.6MB
loader.ps1

363B

b59bb12e.zip

SHA256 d52c12fc70f57659bfa4fa777db89e261b6c50cbb335f324afe077927be5463b
MD5 fac35bfa475df147da05e31bdbab062a
SHA1 22813bce5db73425cc7a9f14d72fdb409fd8a476
SHA512 772476cd51bb78de63764b03734360c80e4af9f8dee01f6dae1f8e255af404c5b164f99899804f6b3edecda1f1178957f6ab35fd92ec3494a6a1b515ff501e87
SSDEEP 24576:Qb5pbHXdoZjv8tBvHb5CIN8LuGWI1w4xcVUKHBXQb3RtuyG:Q1lXdOv8td7EIqrWowpLkhYb
TLSH
T1AD2533738EC68A4CC47E01E834984594AADDEB7BA283E29ED430BFDBF4543532ACD554
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

b59bb12e.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b59bb12e4b0f6d6b302feea870b6e4b830d7603976c52e2526482c9178e1836c
MD5 d53c7d2954d0e095a6cd815782ec7324
SHA1 ca8aa4b74646ef2102b14a67a7ca7f782827c8aa
SHA512 f0f4a795a882421f88553f2a845835441e7c7d58773d8fe6768fe381a604c0cc2bcd946a82986ac9a017c50c8ca00400e1e533a050237cfd82f59e9744c39ca9
SSDEEP 24576:ja/ik55c0ax5UPpyTr0XaXyqBCbDacibdJ65v7fzUU/1CEmLD6AZTJFk9P/tU5Af:ja60BkCL3fCEmLG+ypbuc
TLSH
T164C58D0473AC9B27D5AF5B7AE470151887F1D58BA753EB1F1E88BAE92C433809D012E7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

2707822

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

b59bb12e.zip

b59bb12e.dll

mscoree

dotnet

loader.ps1

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

b59bb12e.zip

b59bb12e.dll

mscoree

dotnet

loader.ps1