General

  • Target
    Persistence.zip
  • Size 60.6MB
  • Sample260713-2ln2csb19x
  • SHA256 232c91dd976bb6b18f7838e4bb2c1c07f3e9d4d58180a3533b065ba17cae4694
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Persistence.zip
    .zip 60.6MB
  • AXEDOMCore.dll
    .dll 787KB
  • AdbePM.dll
    .dll 2.8MB
  • Builder.dll
    42.8MB
  • Launcher.exe
    .exe 20.0MB
  • adobe_caps.dll
    .dll 1.0MB
  • dvacore.dll
    .dll 3.9MB
  • dynamiclink.dll
    .dll 2.2MB
  • icuuc64.dll
    .dll 2.3MB
  • igestep30.dll
    .dll 758KB
  • lgpllibs.dll
    .dll 151KB
  • metadata/CRClient.dll
    .dll 326KB
  • metadata/dvamarshal.dll
    .dll 263KB
  • version.dll
    .dll 8.5MB

Persistence.zip

  • SHA256 232c91dd976bb6b18f7838e4bb2c1c07f3e9d4d58180a3533b065ba17cae4694
  • MD5 SHA1 SHA512 SSDEEP TLSH