primordial[.]rar | Triage™

General

Target
primordial.rar
Size 427KB
Sample260707-mt4dpags8v
SHA256 d3877cd2b54fd0ac1db3f58848e06afc1a306d2c1517c60500536634d01733f9
MD5 ae43a2438a03d0b867044cd2b939b5a6
SHA1 389fd012c7b205457054b345e0a2d9fe4b7e6238
SHA512 a28536c906f6502d1c80a4d88abf9fc4c1d3272e1b8447d65de90147adf44333dda43622915e1441ef9cbfef8d6a4bc14d362d26cdfaef8f9574faef7f55306c
SSDEEP 6144:qdFIPQafcU/ClNHq4YqwBwB0NLx0+9aEExgxer/+nc/0KR+0Gzf2/oh8bVRyMkXy:xIgmQqwBwBn9Lh700+00e/7hRyMKy
TLSH
T19294234F5CBF258DE1B0AFAAFF08DD4F5EB5208CA68161017282D3B674F91B503AD54A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/primordial.exe

File Explorer

primordial.rar

.rar 427KB
primordial.exe

.exe 830KB

primordial.rar

SHA256 d3877cd2b54fd0ac1db3f58848e06afc1a306d2c1517c60500536634d01733f9
MD5 ae43a2438a03d0b867044cd2b939b5a6
SHA1 389fd012c7b205457054b345e0a2d9fe4b7e6238
SHA512 a28536c906f6502d1c80a4d88abf9fc4c1d3272e1b8447d65de90147adf44333dda43622915e1441ef9cbfef8d6a4bc14d362d26cdfaef8f9574faef7f55306c
SSDEEP 6144:qdFIPQafcU/ClNHq4YqwBwB0NLx0+9aEExgxer/+nc/0KR+0Gzf2/oh8bVRyMkXy:xIgmQqwBwBn9Lh700+00e/7hRyMKy
TLSH
T19294234F5CBF258DE1B0AFAAFF08DD4F5EB5208CA68161017282D3B674F91B503AD54A
MD5 SHA1 SHA512 SSDEEP TLSH

Password

4321

primordial.exe

SHA256 aafe335548c7a6423b0deea25c8c513e5c50f69baac9a1b229c29b9278148d16
MD5 7cb3354d1e0a20f838d33f73226f7688
SHA1 08b97cc48286bd8277241ab130b567c5676f3005
SHA512 1e966e1a04af9109e47189f371980d23accd73b0b9d3ea328b8de575a3eb4f22b6c890bca58aec81de78f597a43001eef2dee479f21d5b2f391446fda4dd2bc1
SSDEEP 12288:2SfRnOAPD/7VnaE7a/+0p6tzTx+/zgA3CGnZOfo12xRacFcZcwosdJF+a1:/T/ME+/jizI/zguYgAatcnGF+a1
TLSH
T1F705D6247B94AE01E540163E96BE2608D73260F22713AB47371BF7614D45AFEED2C3DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

4321

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing