180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38[.]zip

General

Target
180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.zip
Size 556KB
Sample260725-xwcc4abb92
SHA256 0b42752daefcb785ac1aac5e70f4bc6e7ce078d5a8f0ec28db01697d7cd03875
MD5 ca1a59f9e0a46ff8c9d7fc09e499a012
SHA1 fccd05ce3d15f1d121d31a1d1f64af429896ad08
SHA512 14cd5fe9afb860e931057aba1bf8e466b920338ff2181754ff0498789812fc966fdf8905b55e820e8ad80b521dc08cf75b99b584b6c52197015479ed539ffd8b
SSDEEP 12288:bcYaaXGSttZlFPgSojVobWmDoSOPlZ7D6lsBs9L9D0:Xa5SttrFoSojI1OPTDx4LK
TLSH
T1F5C423B5CADB434E16628043E106CA2E3AC31823981D9C4DCD553A85FE9D15FB3CDFAA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe

File Explorer

180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.zip

.zip 556KB
180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe

.exe 691KB

180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.zip

SHA256 0b42752daefcb785ac1aac5e70f4bc6e7ce078d5a8f0ec28db01697d7cd03875
MD5 ca1a59f9e0a46ff8c9d7fc09e499a012
SHA1 fccd05ce3d15f1d121d31a1d1f64af429896ad08
SHA512 14cd5fe9afb860e931057aba1bf8e466b920338ff2181754ff0498789812fc966fdf8905b55e820e8ad80b521dc08cf75b99b584b6c52197015479ed539ffd8b
SSDEEP 12288:bcYaaXGSttZlFPgSojVobWmDoSOPlZ7D6lsBs9L9D0:Xa5SttrFoSojI1OPTDx4LK
TLSH
T1F5C423B5CADB434E16628043E106CA2E3AC31823981D9C4DCD553A85FE9D15FB3CDFAA
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38.exe

SHA256 180e93a091f8ab584a827da92c560c78f468c45f2539f73ab2deb308fb837b38
MD5 5e1f61b9c1c27cad3b7a81c804ac7b86
SHA1 c1888ba296f57e87a84411ddfce3cabc4536b142
SHA512 cc3fb6954fe4d1754c816c9bbd05ba1ec320d2a71410993026c02137629edf5abb1d6b46ba45b6ce460f58b9d8e62214d9600785a79ef0571390db8779bc7c31
SSDEEP 12288:0LxxJniMoRpKP9W1u19Ol9tyHDdZIYTbviWYbn8wBNsavTduK14UqMs5XRhazKj:0LIJvyHDPVXahbnNBNgfUjs5Xuz
TLSH
T129E4DFADED0699A0C453F1BCFE0BB4D053157EA44F3AB2A7781915E20A738E43A753C9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:0 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

infected

PE Signature issue

Digest

4d:74:a0:3f:76:c4:11:60:7a:63:d9:01:fc:b7:59:0d:78:19:61:f6:4b:e5:de:cc:2e:6b:a4:9f:4d:05:e5:f9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=ConocoPhillips,OU=Operations,O=ConocoPhillips,L=Brisbane,C=AU,1.2.840.113549.1.9.1=#0c176365727440636f6e6f636f7068696c6c6970732e636f6d

Chains

Jul 24, 2026

CN=ConocoPhillips,OU=Operations,O=ConocoPhillips,L=Brisbane,C=AU,1.2.840.113549.1.9.1=#0c176365727440636f6e6f636f7068696c6c6970732e636f6d

Minor OS version

0

Major OS version

0

Entry point

94512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Resubmissions

Sharing