18072026_0937_HG9765445678900[.]bat[.]zip

General

Target
18072026_0937_HG9765445678900.bat.zip
Size 112KB
Sample260718-lld86aft4l
SHA256 1518c556bd665b7dc0f7ec9a949a03036696f67784155b6df744e9f26185cfd2
MD5 536eba63615b6c2b11bda66f288a7de7
SHA1 bc3060da0f0b97029e09e06cdede671c7e6bfde5
SHA512 26f978f82257e61bfcdc34dbe460eff7b555997ec71774bc0768b5bee6a941f931da1b152e07b20e16ed4dc89a2e2c3d58e269d6d60cb86fcce86223c737eea9
SSDEEP 3072:Kknsb1dz4q44SlXG4YB2yD1wtrCMFoRCn973b4r9:cr44O6xD1fMFR97L4r9
TLSH
T10CB313616E10C17E2622A0B061B9F958E2B21E9CDF1C1F5279DA4F4369DF9638E73831
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HG9765445678900.bat

File Explorer

18072026_0937_HG9765445678900.bat.zip

.zip 112KB
HG9765445678900.bat

.exe 151KB

18072026_0937_HG9765445678900.bat.zip

SHA256 1518c556bd665b7dc0f7ec9a949a03036696f67784155b6df744e9f26185cfd2
MD5 536eba63615b6c2b11bda66f288a7de7
SHA1 bc3060da0f0b97029e09e06cdede671c7e6bfde5
SHA512 26f978f82257e61bfcdc34dbe460eff7b555997ec71774bc0768b5bee6a941f931da1b152e07b20e16ed4dc89a2e2c3d58e269d6d60cb86fcce86223c737eea9
SSDEEP 3072:Kknsb1dz4q44SlXG4YB2yD1wtrCMFoRCn973b4r9:cr44O6xD1fMFR97L4r9
TLSH
T10CB313616E10C17E2622A0B061B9F958E2B21E9CDF1C1F5279DA4F4369DF9638E73831
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

HG9765445678900.bat

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c363e567a04e86db78f38568d6aad75186719deac66459276dbba3c458151e70
MD5 622ccff40973d7099893300bfcecc434
SHA1 422ed40f7fdf3aab4f63ed2aec22a9fa8038d7fc
SHA512 93877fed87b55aec4a249603e34644835c6dfd5e107ed95c8b3dc7ecf5c782dd7bfef7a9722113201f4deaa430c2c01307ebe846c05c062852dba46027a1b3a9
SSDEEP 1536:rdz8UporgYj1ZIigeH9ml+M/4TBHM9Kl+U4EJ3YWW0zjqY70fVvvtBTnDqhR80Ou:rdz8UporgqIigeQgu03YMfgL7T49BsU
TLSH
T153E312027B5CDB3BCF7E07BAA45046DA47B04E7A4C19C6DC9EC1A08FBE17F814911996
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

160090

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

18072026_0937_HG9765445678900.bat.zip

HG9765445678900.bat

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

18072026_0937_HG9765445678900.bat.zip

HG9765445678900.bat

mscoree

dotnet