180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38[.]zip

General

Target
180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.zip
Size 556KB
Sample260702-e9v39abx9x
SHA256 7b47624a8099bf444711a0d4a6174de8f140833ec0b7f819c25951d34e3caa0d
MD5 4ca2bec2a917061a1d8234b8760c4e4f
SHA1 2c332a205d39976be367053b85b429f48c760182
SHA512 8851dd90930555e1fd120ab753bb561290a3fb3e49946eb9d05bb4bce7d529f961568d7a55fe0db8738f70bd250b5affa664e6a0434fd23ccd168fb4ff998d0b
SSDEEP 12288:ekSWVaNCt0NrL4fX9Bepn56xLBR0jZS0y1RZDe/zf4Ai18LGD8zdN:hSWVabp4+01R0dLybZ0zQwLhdN
TLSH
T14CC423D890F3D223448CEBFA230855FE723E7445B506BBEE409D9999E8061F67DB7680
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe

File Explorer

180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.zip

.zip 556KB
180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe

.exe 691KB

180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.zip

SHA256 7b47624a8099bf444711a0d4a6174de8f140833ec0b7f819c25951d34e3caa0d
MD5 4ca2bec2a917061a1d8234b8760c4e4f
SHA1 2c332a205d39976be367053b85b429f48c760182
SHA512 8851dd90930555e1fd120ab753bb561290a3fb3e49946eb9d05bb4bce7d529f961568d7a55fe0db8738f70bd250b5affa664e6a0434fd23ccd168fb4ff998d0b
SSDEEP 12288:ekSWVaNCt0NrL4fX9Bepn56xLBR0jZS0y1RZDe/zf4Ai18LGD8zdN:hSWVabp4+01R0dLybZ0zQwLhdN
TLSH
T14CC423D890F3D223448CEBFA230855FE723E7445B506BBEE409D9999E8061F67DB7680
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe

SHA256 180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38
MD5 5e1f61b9c1c27cad3b7a81c804ac7b86
SHA1 c1888ba296f57e87a84411ddfce3cabc4536b142
SHA512 cc3fb6954fe4d1754c816c9bbd05ba1ec320d2a71410993026c02137629edf5abb1d6b46ba45b6ce460f58b9d8e62214d9600785a79ef0571390db8779bc7c31
SSDEEP 12288:0LxxJniMoRpKP9W1u19Ol9tyHDdZIYTbviWYbn8wBNsavTduK14UqMs5XRhazKj:0LIJvyHDPVXahbnNBNgfUjs5Xuz
TLSH
T129E4DFADED0699A0C453F1BCFE0BB4D053157EA44F3AB2A7781915E20A738E43A753C9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:0 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

infected

PE Signature issue

Digest

4d:74:a0:3f:76:c4:11:60:7a:63:d9:01:fc:b7:59:0d:78:19:61:f6:4b:e5:de:cc:2e:6b:a4:9f:4d:05:e5:f9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=ConocoPhillips,OU=Operations,O=ConocoPhillips,L=Brisbane,C=AU,1.2.840.113549.1.9.1=#0c176365727440636f6e6f636f7068696c6c6970732e636f6d

Chains

Jun 30, 2026

CN=ConocoPhillips,OU=Operations,O=ConocoPhillips,L=Brisbane,C=AU,1.2.840.113549.1.9.1=#0c176365727440636f6e6f636f7068696c6c6970732e636f6d

Minor OS version

0

Major OS version

0

Entry point

94512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing