180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38[.]zip

General

Target
180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.zip
Size 556KB
Sample260720-qf8yssbt2m
SHA256 8bffaef033f35c0e504c8a47dd9a8780816a71946919463d4b1d8ef7c4150751
MD5 fca73711f2df4aaa44fb19a7aedf21e7
SHA1 3f2f8c1fb8ca75720bea9eb61e6c8963f0f4ccfd
SHA512 1f27630cd086102454d8af2aa0a92945447845274a58cbf0afe8a3716f79633ad1fcd357bf3e5c865c7d4f3e63e06cb974460cbd61ef967a968bc8923d2a9694
SSDEEP 12288:lJ24p3Qqa8HkmYpHMEGayvp7IzJ6V9uj6KRMmHEPd9PbsFYt:/24p/EVMERu7MII6KJ6Pz
TLSH
T152C4230D613BE34A1D415D98B431BB1DA9908BFB3F4D9DED04858B9E93A0C87990FB38
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe

File Explorer

180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.zip

.zip 556KB
180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe

.exe 691KB

180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.zip

SHA256 8bffaef033f35c0e504c8a47dd9a8780816a71946919463d4b1d8ef7c4150751
MD5 fca73711f2df4aaa44fb19a7aedf21e7
SHA1 3f2f8c1fb8ca75720bea9eb61e6c8963f0f4ccfd
SHA512 1f27630cd086102454d8af2aa0a92945447845274a58cbf0afe8a3716f79633ad1fcd357bf3e5c865c7d4f3e63e06cb974460cbd61ef967a968bc8923d2a9694
SSDEEP 12288:lJ24p3Qqa8HkmYpHMEGayvp7IzJ6V9uj6KRMmHEPd9PbsFYt:/24p/EVMERu7MII6KJ6Pz
TLSH
T152C4230D613BE34A1D415D98B431BB1DA9908BFB3F4D9DED04858B9E93A0C87990FB38
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe

SHA256 180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38
MD5 5e1f61b9c1c27cad3b7a81c804ac7b86
SHA1 c1888ba296f57e87a84411ddfce3cabc4536b142
SHA512 cc3fb6954fe4d1754c816c9bbd05ba1ec320d2a71410993026c02137629edf5abb1d6b46ba45b6ce460f58b9d8e62214d9600785a79ef0571390db8779bc7c31
SSDEEP 12288:0LxxJniMoRpKP9W1u19Ol9tyHDdZIYTbviWYbn8wBNsavTduK14UqMs5XRhazKj:0LIJvyHDPVXahbnNBNgfUjs5Xuz
TLSH
T129E4DFADED0699A0C453F1BCFE0BB4D053157EA44F3AB2A7781915E20A738E43A753C9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:0 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

infected

PE Signature issue

Digest

4d:74:a0:3f:76:c4:11:60:7a:63:d9:01:fc:b7:59:0d:78:19:61:f6:4b:e5:de:cc:2e:6b:a4:9f:4d:05:e5:f9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=ConocoPhillips,OU=Operations,O=ConocoPhillips,L=Brisbane,C=AU,1.2.840.113549.1.9.1=#0c176365727440636f6e6f636f7068696c6c6970732e636f6d

Chains

Jul 17, 2026

CN=ConocoPhillips,OU=Operations,O=ConocoPhillips,L=Brisbane,C=AU,1.2.840.113549.1.9.1=#0c176365727440636f6e6f636f7068696c6c6970732e636f6d

Minor OS version

0

Major OS version

0

Entry point

94512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing