180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38[.]zip

General

Target
180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.zip
Size 556KB
Sample260701-vpsemaaz5r
SHA256 d37088b9faf797ec0c60cd9ee30ac1cfe95311dbf47144c6b18a54325ee173aa
MD5 092d341711495c51987d3d8808028a8a
SHA1 73f4ac7cafafb4b18697f1a41cba115a4b41d3df
SHA512 1c2e13f953729f999c755325e7c2fdeec8c3700cfe492d5f3e6d9700c9d2a85c42c5119bbce3382dce5bceffb2c840ccf410d17c4f5140f48b7acf690d258b2e
SSDEEP 12288:o5Tb0hyKcXHHKUbLgPoWhv51gKKcVQc6j7qUsUV3s8TPSsp+l:+jqUbOoWhvDKA67qGZSspS
TLSH
T112C423AEF50CCFA020A099ACD99AAC7775B39FD1359C199DC3B021C68793251ACC739D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe

File Explorer

180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.zip

.zip 556KB
180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe

.exe 691KB

180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.zip

SHA256 d37088b9faf797ec0c60cd9ee30ac1cfe95311dbf47144c6b18a54325ee173aa
MD5 092d341711495c51987d3d8808028a8a
SHA1 73f4ac7cafafb4b18697f1a41cba115a4b41d3df
SHA512 1c2e13f953729f999c755325e7c2fdeec8c3700cfe492d5f3e6d9700c9d2a85c42c5119bbce3382dce5bceffb2c840ccf410d17c4f5140f48b7acf690d258b2e
SSDEEP 12288:o5Tb0hyKcXHHKUbLgPoWhv51gKKcVQc6j7qUsUV3s8TPSsp+l:+jqUbOoWhvDKA67qGZSspS
TLSH
T112C423AEF50CCFA020A099ACD99AAC7775B39FD1359C199DC3B021C68793251ACC739D
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe

SHA256 180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38
MD5 5e1f61b9c1c27cad3b7a81c804ac7b86
SHA1 c1888ba296f57e87a84411ddfce3cabc4536b142
SHA512 cc3fb6954fe4d1754c816c9bbd05ba1ec320d2a71410993026c02137629edf5abb1d6b46ba45b6ce460f58b9d8e62214d9600785a79ef0571390db8779bc7c31
SSDEEP 12288:0LxxJniMoRpKP9W1u19Ol9tyHDdZIYTbviWYbn8wBNsavTduK14UqMs5XRhazKj:0LIJvyHDPVXahbnNBNgfUjs5Xuz
TLSH
T129E4DFADED0699A0C453F1BCFE0BB4D053157EA44F3AB2A7781915E20A738E43A753C9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:0 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

infected

PE Signature issue

Digest

4d:74:a0:3f:76:c4:11:60:7a:63:d9:01:fc:b7:59:0d:78:19:61:f6:4b:e5:de:cc:2e:6b:a4:9f:4d:05:e5:f9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=ConocoPhillips,OU=Operations,O=ConocoPhillips,L=Brisbane,C=AU,1.2.840.113549.1.9.1=#0c176365727440636f6e6f636f7068696c6c6970732e636f6d

Chains

Jun 30, 2026

CN=ConocoPhillips,OU=Operations,O=ConocoPhillips,L=Brisbane,C=AU,1.2.840.113549.1.9.1=#0c176365727440636f6e6f636f7068696c6c6970732e636f6d

Minor OS version

0

Major OS version

0

Entry point

94512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing