610[.]74[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
610.74.exe
Size 889.0MB
Sample260808-th3fkszflf
SHA256 c3a557b6c429bcda6b56771ae17ef7e7cd347405e129dc10095cfb5f5f874121
MD5 6239e47708887a3f6619c4e5875cc49c
SHA1 8c98ad96cffd0db6f4ccd1e952e0186b52afef94
SHA512 dbc62cbfc9a127fd573b969429387728abe014fead85077c0ba8694f5169b0e2c4bc98225b3abeac1476deed2b417ce64572526617161d3c05c2824422bc0784
SSDEEP 25165824:qW6LVR/jC9Pe2fJ0vdpiV9Vgq9G5vxN5C2j9Yw/Jnu:qWAnjC9Pe2fJKpiV41PN55j9vY
TLSH
T101A933C185BC8F93EF80363553B4F4D22A685A006C7456BECA9D8970ED79C838275EDE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
610.74.exe

File Explorer

610.74.exe

.exe 889.0MB

610.74.exe

IMPHASH 9d36299141dab99fcb6ba060f8918cae
SHA256 c3a557b6c429bcda6b56771ae17ef7e7cd347405e129dc10095cfb5f5f874121
MD5 6239e47708887a3f6619c4e5875cc49c
SHA1 8c98ad96cffd0db6f4ccd1e952e0186b52afef94
SHA512 dbc62cbfc9a127fd573b969429387728abe014fead85077c0ba8694f5169b0e2c4bc98225b3abeac1476deed2b417ce64572526617161d3c05c2824422bc0784
SSDEEP 25165824:qW6LVR/jC9Pe2fJ0vdpiV9Vgq9G5vxN5C2j9Yw/Jnu:qWAnjC9Pe2fJKpiV41PN55j9vY
TLSH
T101A933C185BC8F93EF80363553B4F4D22A685A006C7456BECA9D8970ED79C838275EDE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

106012

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysAllocStringLen SysStringLen VariantClear

user32

DialogBoxParamW SetWindowLongW GetWindowLongW GetDlgItem SetTimer LoadStringW CharUpperW DestroyWindow EndDialog PostMessageW SetWindowTextW ShowWindow MessageBoxW LoadIconW KillTimer SendMessageW

shell32

ShellExecuteExW

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _except_handler3 _beginthreadex memset wcsstr free malloc memcpy _CxxThrowException _purecall memmove memcmp wcscmp __CxxFrameHandler

kernel32

CreateProcessW GetStartupInfoA InitializeCriticalSection ReleaseSemaphore CreateSemaphoreW ResetEvent SetEvent CreateEventW GetModuleHandleW GetVersion VirtualFree VirtualAlloc Sleep GlobalMemoryStatus GetSystemInfo GetCurrentProcess GetProcessAffinityMask SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetFileAttributesW GetModuleHandleA GetProcAddress FindNextFileW FindFirstFileW FindClose GetStdHandle GetFileInformationByHandle GetCurrentThreadId GetTickCount GetCurrentProcessId GetTempPathW GetCurrentDirectoryW SetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime GetSystemDirectoryW FormatMessageW LocalFree GetModuleFileNameW LoadLibraryExW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError GetVersionExW WaitForSingleObject CloseHandle GetCommandLineW