07082026_1335_07082026_order[.]rar

General

Target
07082026_1335_07082026_order.rar
Size 959KB
Sample260807-qv1kzagb39
SHA256 783b1326ee4b40bf79e689c9b7eeb90efb50024849eb748d03b6b8cf8b70d72a
MD5 5f45a388ef429ac44b275f2f4b776c95
SHA1 fed90dadab1b5be660cf8765dcfe89e2f620929a
SHA512 903512d1484d0ff0d40f5946baf60c425c25f087ec869a3ab82b7fb76891e27e38b2d5e44de2e1bc62b142693ee8ddc0f9cb9f0dc714e39e84aa5893affaf113
SSDEEP 24576:IgZzFuDi+O/L0leDNghkJu0bN732+hwuxFsyMw+Dehbn2oUn:I6ADi+kL0lemQFZ32KutYnpE
TLSH
T1232533E9B750805E9D4B03A52D7471163EE0B8D5D813ED620AD533AF02990D73DEEA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/order.bat

File Explorer

07082026_1335_07082026_order.rar

.rar 959KB
order.bat

.exe 1.0MB

07082026_1335_07082026_order.rar

SHA256 783b1326ee4b40bf79e689c9b7eeb90efb50024849eb748d03b6b8cf8b70d72a
MD5 5f45a388ef429ac44b275f2f4b776c95
SHA1 fed90dadab1b5be660cf8765dcfe89e2f620929a
SHA512 903512d1484d0ff0d40f5946baf60c425c25f087ec869a3ab82b7fb76891e27e38b2d5e44de2e1bc62b142693ee8ddc0f9cb9f0dc714e39e84aa5893affaf113
SSDEEP 24576:IgZzFuDi+O/L0leDNghkJu0bN732+hwuxFsyMw+Dehbn2oUn:I6ADi+kL0lemQFZ32KutYnpE
TLSH
T1232533E9B750805E9D4B03A52D7471163EE0B8D5D813ED620AD533AF02990D73DEEA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

order.bat

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7ca35dfbad362c95fb5125c30bc69c7895e55aed2547316701c8c7c58844ee59
MD5 d1866aba43ecebe0990dda4b2711475b
SHA1 406419486a759b015d74ec1ab3c0728df50b045a
SHA512 24a8fe6df284f3cedbc73f43062ef942b9f4a9d0dffef9fc3cb814c4647dd84c224b3b34dca6289d6e931e5aa81eacb5d8498cf202c09052db7cffbe9464202b
SSDEEP 24576:fgAafukfgaA9vhF456grgHLz4/R2lk/guEHjNlyl:fpvk4aA9Xi6y/R6k/wjj6
TLSH
T119350204266FE812C4825BB449B0D7F846788F896A13D307DEFE7D9FB95E38929443D2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1064286

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

DTIF.pdb

07082026_1335_07082026_order.rar

order.bat

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

07082026_1335_07082026_order.rar

order.bat

mscoree

dotnet