General

  • Target
    8c9d73a325397070eb159cb74dc58905b87020c3ddb3e3d095460ece25e20b41
  • Size 3.5MB
  • Sample260712-kdd3ragx2x
  • SHA256 8c9d73a325397070eb159cb74dc58905b87020c3ddb3e3d095460ece25e20b41
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 8c9d73a325397070eb159cb74dc58905b87020c3ddb3e3d095460ece25e20b41
    .zip 3.5MB
  • AJANAIMPEX-RFQ TRI755.exe
    .exe 3.1MB
  • msvcp140.dll
    .dll 540KB
  • tbbmalloc.dll
    .dll 1.8MB
  • ucrtbase.dll
    .dll 1.3MB
  • vcruntime140.dll
    .dll 120KB
  • vcruntime140_1.dll
    .dll 46KB

8c9d73a325397070eb159cb74dc58905b87020c3ddb3e3d095460ece25e20b41

  • SHA256 8c9d73a325397070eb159cb74dc58905b87020c3ddb3e3d095460ece25e20b41
  • MD5 SHA1 SHA512 SSDEEP TLSH