General

  • Target
    update.zip
  • Size 773KB
  • Sample260731-pptd2atapd
  • SHA256 5753ef9bddc817235028774271b44ae94f813938b09b4ee93cfe799afacf2afa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • update.zip
    .zip 773KB
  • 1.bat
    1KB
  • LockScreenContentServer.exe
    .exe 48KB
  • dui70.dll
    .dll 1.9MB

update.zip

  • SHA256 5753ef9bddc817235028774271b44ae94f813938b09b4ee93cfe799afacf2afa
  • MD5 SHA1 SHA512 SSDEEP TLSH