NEW[.]zip | Triage™

General

Target
NEW.zip
Size 68.6MB
Sample260806-sd2stadq4t
SHA256 f434c9f975989854dfdec7e644dbf9505bdd2db43c992a9c6fee7b6c98dc510b
MD5 328f48c4d76cc6104ef20358bb78b60d
SHA1 192332324a895e5857b77d24cb0a0ad4c48852e8
SHA512 4af6456ab4f3194056a4789077a5e16a7e4278ac9ea5ef7196eabc4a684d8bbbe6ee9a25f4bd0ee32a9f595c1fa706dfe415c85224dfe7954c08e5f884d2eae9
SSDEEP 1572864:RUhuHKwACu0h0y1PqUbV0Mq3woTKmMQMwYQZ8J2hFnwlF47:2PwFuAR1Pqua13wR/QMDO8J2h6F2
TLSH
T147F733B0CD951CC5B8C76341B8A1AE7D37A848A9538AEC71FCE7E7C5DA239707476880
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1_nexora_complete.exe

File Explorer

NEW.zip

.zip 68.6MB
1_nexora_complete.exe

.exe 68.8MB
Kılavuz.txt

455B
yonetici calistir sonra loaderi aç.bat

636B

NEW.zip

SHA256 f434c9f975989854dfdec7e644dbf9505bdd2db43c992a9c6fee7b6c98dc510b
MD5 328f48c4d76cc6104ef20358bb78b60d
SHA1 192332324a895e5857b77d24cb0a0ad4c48852e8
SHA512 4af6456ab4f3194056a4789077a5e16a7e4278ac9ea5ef7196eabc4a684d8bbbe6ee9a25f4bd0ee32a9f595c1fa706dfe415c85224dfe7954c08e5f884d2eae9
SSDEEP 1572864:RUhuHKwACu0h0y1PqUbV0Mq3woTKmMQMwYQZ8J2hFnwlF47:2PwFuAR1Pqua13wR/QMDO8J2h6F2
TLSH
T147F733B0CD951CC5B8C76341B8A1AE7D37A848A9538AEC71FCE7E7C5DA239707476880
MD5 SHA1 SHA512 SSDEEP TLSH

1_nexora_complete.exe

SHA256 9eab06e7971ee39a8db4ca1a66d35a8f38931b9aa0c768d8a4446a4787224149
MD5 48d33d44bffd173014bc5c8bfd96810f
SHA1 bb2428570eb03006896281dabb37312addc2cb9d
SHA512 d44bdbe732517ab0863cd4c18573c898b076cb55363fdac48fb24ff54946f2ee2c48fbf98702eeb2addf3fb2221b678e0963b327f873c1fae7393ac63d6d8b22
SSDEEP 1572864:cPl+N0wYSQgJAGvdwE798N+kSrJ+pQaJgEYyd5b1V/Kv3YQq:4/wNQ4HvdwKywkSKQaJgE951V/Kv
TLSH
T1F9F73360C9D40C8FF48B53746DE19D193BD55CB287838EDBA886A7C4CE23EE07879A15
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

NEW.zip

1_nexora_complete.exe

generic

Kılavuz.txt

yonetici calistir sonra loaderi aç.bat