General

  • Target
    Institute.zip
  • Size 62.2MB
  • Sample260820-bb5m9azvdx
  • SHA256 c7b429549f0f74af22d0d0a73b5cf7020a48ee00e0d9c87ca8b2698f5d2c6ab4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Institute.zip
    .zip 62.2MB
  • A3DLIBS.dll
    .dll 846KB
  • AXEDOMCore.dll
    .dll 787KB
  • AccessibleMarshal.dll
    .dll 30KB
  • CITThreading.dll
    .dll 143KB
  • Launcher.exe
    .exe 20.0MB
  • Westfield.dll
    49.6MB
  • dvacrashhandler.dll
    .dll 103KB
  • format_reader.dll
    .dll 152KB
  • icuuc64.dll
    .dll 2.3MB
  • lib3mfc.dll
    .dll 516KB
  • metadata/AGM.dll
    .dll 4.4MB
  • metadata/BIBUtils.dll
    .dll 184KB
  • metadata/ffmpeg.dll
    .dll 2.6MB
  • version.dll
    .dll 822KB

Institute.zip

  • SHA256 c7b429549f0f74af22d0d0a73b5cf7020a48ee00e0d9c87ca8b2698f5d2c6ab4
  • MD5 SHA1 SHA512 SSDEEP TLSH