General

  • Target
    update.zip
  • Size 816KB
  • Sample260804-bt84dsttcs
  • SHA256 ffb66843fb8d393976b08498328b9f818c0d5b1c38576aedb712300567ae5866
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • update.zip
    .zip 816KB
  • 1.bat
    1KB
  • LockScreenContentServer.exe
    .exe 48KB
  • dui70.dll
    .dll 2.1MB

update.zip

  • SHA256 ffb66843fb8d393976b08498328b9f818c0d5b1c38576aedb712300567ae5866
  • MD5 SHA1 SHA512 SSDEEP TLSH