General

  • Target
    ViceCallers.zip
  • Size 3.1MB
  • Sample260722-wlv7sa1dkd
  • SHA256 3fd11ea95d8ca1623f98f8a19c834a9193ab2b8a209d596d326621c2a9ee78c9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • ViceCallers.zip
    .zip 3.1MB
  • VCRUNTIME140.dll
    .dll 83KB
  • VCRUNTIME140_1.dll
    .dll 48KB
  • glib-2.0.dll
    .dll 1.2MB
  • gmodule-2.0.dll
    .dll 29KB
  • gobject-2.0.dll
    .dll 293KB
  • intl.dll
    .dll 109KB
  • pcre.dll
    .dll 402KB
  • vmtools.dll
    .dll 867KB
  • vmtoolsd.exe
    .exe 108KB

ViceCallers.zip

  • SHA256 3fd11ea95d8ca1623f98f8a19c834a9193ab2b8a209d596d326621c2a9ee78c9
  • MD5 SHA1 SHA512 SSDEEP TLSH