General

  • Target
    Bonifico n.11012607232903.img
  • Size 8.9MB
  • Sample260723-ldd87avdnb
  • SHA256 4d33427dff2192345c1caa6ff5082370d7c6a8274b42e18b301622a22005e1d6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 4 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Bonifico n.11012607232903.img
    .iso 8.9MB
  • out.iso
    .iso 8.9MB
  • 1_Bonifico n.11012607232903.pdf.exe
    .exe 561KB
  • 1_Bonifico n.11012607232903_001.pdf.exe
    .exe 561KB
  • 1_Bonifico n.11012607232903_002..pdf.exe
    .exe 561KB
  • SspiCli.dll
    .dll 300KB
  • WTSAPI32.dll
    .dll 174KB
  • atom.dll
    .dll 3.4MB
  • encoding-conversion.dll
    .dll 23KB
  • msvcp140.dll
    .dll 540KB
  • root-service-provider.dll
    .dll 850KB
  • ucrtbase.dll
    .dll 1.3MB
  • vcruntime140.dll
    .dll 120KB
  • vcruntime140_1.dll
    .dll 46KB

Bonifico n.11012607232903.img

  • SHA256 4d33427dff2192345c1caa6ff5082370d7c6a8274b42e18b301622a22005e1d6
  • MD5 SHA1 SHA512 SSDEEP TLSH