ATIVADOR PROCESS LASSO[.]rar

General

Target
ATIVADOR PROCESS LASSO.rar
Size 648KB
Sample260727-tvmkwshr61
SHA256 47a871b1f5aafcd87736f6b6c4efa45ce621447ff1e0e42c3d86c3bf5afe9861
MD5 57adcc1b9b3212d5cf0fca62be076b76
SHA1 a7675b90698273363efa3974db4e2d77c0dec75a
SHA512 522a14022bb27d9d9c88fd0577e77a6453095201adae88280ac71f44c72ef7ef6aa4e852bdda9bcfdb4fe1816b8abc2e3bb3d04de917e39bbc1e296d2ec5ba23
SSDEEP 12288:aLxyjabJ8Dguh1ky16JndKuKB3M4shpHXsm5K9ORuYk:ORasuh1/6e/mlEm8MYYk
TLSH
T114E423DBC0191A95E3CC69372EC1207E9B83310AEA98D8D6BC5D524549C52FBBF642CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Process Lasso/Activator.exe

File Explorer

ATIVADOR PROCESS LASSO.rar

.rar 648KB
Process Lasso/Activator.exe

.exe 684KB
Process Lasso/Activator.txt

885B

ATIVADOR PROCESS LASSO.rar

SHA256 47a871b1f5aafcd87736f6b6c4efa45ce621447ff1e0e42c3d86c3bf5afe9861
MD5 57adcc1b9b3212d5cf0fca62be076b76
SHA1 a7675b90698273363efa3974db4e2d77c0dec75a
SHA512 522a14022bb27d9d9c88fd0577e77a6453095201adae88280ac71f44c72ef7ef6aa4e852bdda9bcfdb4fe1816b8abc2e3bb3d04de917e39bbc1e296d2ec5ba23
SSDEEP 12288:aLxyjabJ8Dguh1ky16JndKuKB3M4shpHXsm5K9ORuYk:ORasuh1/6e/mlEm8MYYk
TLSH
T114E423DBC0191A95E3CC69372EC1207E9B83310AEA98D8D6BC5D524549C52FBBF642CF
MD5 SHA1 SHA512 SSDEEP TLSH

Password

3030

Process Lasso/Activator.exe

SHA256 dda1582fcdf7355bb64d7029f6c8c92f7768d93fa5f8921af38d63a1bebf5e3f
MD5 063e6d3b5c4c8a35d0a12bd6d25176f9
SHA1 203df188a8922cb75ad6bbb5232c40b9dceb8bff
SHA512 980be04ec1ec95bbf9568c93d0c48334d32acd48b365ca96f708b27df273005bdf861f245153cddaadbb4450e7f0e5ba6732aad82c87724f548bd9f11dedcd1e
SSDEEP 12288:l+Qz1ml4GzNM2zcUs0wdaE8UrJac8dqVH6sA5fUrvvD8GaWdeA7X2zSrmm1eMNom:lmlZMuxs1f538sA5crYGaWcmX5feHq
TLSH
T160E423A971B0E1C6CC8A13790F87C2B98B917C39D42196567B7E3B0F2E33245C6B6D61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

3030

Minor OS version

0

Major OS version

4

Entry point

1849456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Sharing