26062026_0433_25062026_SGYI01[.]7z

General

Target
26062026_0433_25062026_SGYI01.7z
Size 1.4MB
Sample260626-e6r77agy6t
SHA256 4818606752ed9de92c5fbca7c76cc04be377de37a6a20915882d0dd66afb95d8
MD5 7f1ec742b6dd90cf424deb7f40004212
SHA1 d82a6932f5f9e6890e19c5fffe6e4e178033cb4e
SHA512 cf408dfe33c1e0ec347e259acafe9e97c788d1f483195fba14501228afc4383ba3def04f35ba65f55d4f5619ba3bb0f9a56ea067d5cfb38024ec6b7491979f00
SSDEEP 24576:efJYYsLgPyDg862Hn8nCE16s7rrvmPG4ugIm8VOEt7AHhIzCZW3b590t8w3O06tk:efVEOyRH3EUcDm+4u7X7MIKW3bvub30C
TLSH
T1ED6533A7C377C54C37A2BB716D02A59D96438B0FF131A57EA3C9A9A2443DC3EA320D51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SGYI01.exe

File Explorer

26062026_0433_25062026_SGYI01.7z

.zip 1.4MB
SGYI01.exe

.exe 1.5MB

26062026_0433_25062026_SGYI01.7z

SHA256 4818606752ed9de92c5fbca7c76cc04be377de37a6a20915882d0dd66afb95d8
MD5 7f1ec742b6dd90cf424deb7f40004212
SHA1 d82a6932f5f9e6890e19c5fffe6e4e178033cb4e
SHA512 cf408dfe33c1e0ec347e259acafe9e97c788d1f483195fba14501228afc4383ba3def04f35ba65f55d4f5619ba3bb0f9a56ea067d5cfb38024ec6b7491979f00
SSDEEP 24576:efJYYsLgPyDg862Hn8nCE16s7rrvmPG4ugIm8VOEt7AHhIzCZW3b590t8w3O06tk:efVEOyRH3EUcDm+4u7X7MIKW3bvub30C
TLSH
T1ED6533A7C377C54C37A2BB716D02A59D96438B0FF131A57EA3C9A9A2443DC3EA320D51
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

SGYI01.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 361ef56a8016de1052d39311bbf1288e3673d2fc8c06eb4a864841d018979eb7
MD5 9856ca926fc6b0b41d1548c9b7878b9d
SHA1 dd08c8c89c4b6f02df0abe4876a51e9d7fc83c36
SHA512 3c14fd74b065a168f5b6a9725846c6f0ae4e730dfc5135104f7dd70cfc072188571ab35f36f5e506dc53a5ddfae42936ead33ce82d04b686c89a0834de1fbe8c
SSDEEP 24576:sEYY2Lg+d2yk8auTMnqn70jI0ZLvmPu4ugIe8VeEtBwxhUdCfe3vLP0z8+3/CGUp:sC29ZTOqn70JZjmW4u7vBkUke3vLE33U
TLSH
T1436522291527C809E5E23EB05C71F1F9AB62AE9AF339C0291FC64D67B62752D3C04736
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1518870

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Administrator\Desktop\Client\Temp\fXaLoHFofY\src\obj\Debug\uKEi.pdb

26062026_0433_25062026_SGYI01.7z

SGYI01.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

26062026_0433_25062026_SGYI01.7z

SGYI01.exe

mscoree

dotnet