2857269196f820d1cefe17e55a9c9f6cb29fb799550fa57650bc2e8ce0e7d27e[.]zip

General

Target
2857269196f820d1cefe17e55a9c9f6cb29fb799550fa57650bc2e8ce0e7d27e.zip
Size 375KB
Sample260712-1vezdahs8p
SHA256 df92bb571fb287ad1fb7f6fd6c4fdb656ccc0993c1f2c90fcd44d6f423e4d9d8
MD5 bb69fef6dd225cc3651c4d963fc9c442
SHA1 504b83afd508a4671695d24619551049c39b349d
SHA512 2d9ae0a70006dad682d392b7d46da0bb087f00c4ab64319260a981c57ce39dd46c61c0c3aed49a0586151e8ecb0e906f5d4ae86d6f2a0751d5c8f9c7fa9bd9cb
SSDEEP 6144:92bM+vGa3Ih5yWlDcLPRQxvBVMqzPJeMAYoPrue162UKV8cj6wbLw7VgqS5:92A+vZSYWlhxvDMEHozueE2vMpgqI
TLSH
T19C8423AA3E5B27D10C454C3D9B2EE70830360159A85B31D6CA4E7C78D5EAC4C7E85E9F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2857269196f820d1cefe17e55a9c9f6cb29fb799550fa57650bc2e8ce0e7d27e.exe

File Explorer

2857269196f820d1cefe17e55a9c9f6cb29fb799550fa57650bc2e8ce0e7d27e.zip

.zip 375KB
2857269196f820d1cefe17e55a9c9f6cb29fb799550fa57650bc2e8ce0e7d27e.exe

.exe 1.2MB

2857269196f820d1cefe17e55a9c9f6cb29fb799550fa57650bc2e8ce0e7d27e.zip

SHA256 df92bb571fb287ad1fb7f6fd6c4fdb656ccc0993c1f2c90fcd44d6f423e4d9d8
MD5 bb69fef6dd225cc3651c4d963fc9c442
SHA1 504b83afd508a4671695d24619551049c39b349d
SHA512 2d9ae0a70006dad682d392b7d46da0bb087f00c4ab64319260a981c57ce39dd46c61c0c3aed49a0586151e8ecb0e906f5d4ae86d6f2a0751d5c8f9c7fa9bd9cb
SSDEEP 6144:92bM+vGa3Ih5yWlDcLPRQxvBVMqzPJeMAYoPrue162UKV8cj6wbLw7VgqS5:92A+vZSYWlhxvDMEHozueE2vMpgqI
TLSH
T19C8423AA3E5B27D10C454C3D9B2EE70830360159A85B31D6CA4E7C78D5EAC4C7E85E9F
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

2857269196f820d1cefe17e55a9c9f6cb29fb799550fa57650bc2e8ce0e7d27e.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2857269196f820d1cefe17e55a9c9f6cb29fb799550fa57650bc2e8ce0e7d27e
MD5 06f35aa793d54a8c30233d5e74f55c33
SHA1 55ed367a8e8116a81b404bcf839381e30bd56af6
SHA512 c5ee40e795f195a0189877e26e8aad6d612b31fc89123b2d1d92aedd6abf8919006aa4f2aab3620bdf8f825f4183cd108061008d3e1102af665c58c628f65d63
SSDEEP 6144:wKiEUMQKyRXiHWuKiEncPzlBZ+RYy4xhq:wKMAUXiH4/cn+R3
TLSH
T13745D42237519D3AE8CED3308850E3B06E74AE47AE15B60399F4FE6B78365F68D441B1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

804194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\lorde\source\repos\Trizemetrinomeia Ransomware\Trizemetrinomeia Ransomware\obj\Debug\HEXAMETHYLCYCLOTRISILOXANE.pdb

2857269196f820d1cefe17e55a9c9f6cb29fb799550fa57650bc2e8ce0e7d27e.zip

2857269196f820d1cefe17e55a9c9f6cb29fb799550fa57650bc2e8ce0e7d27e.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

2857269196f820d1cefe17e55a9c9f6cb29fb799550fa57650bc2e8ce0e7d27e.zip

2857269196f820d1cefe17e55a9c9f6cb29fb799550fa57650bc2e8ce0e7d27e.exe

mscoree

dotnet