General

  • Target
    update.zip
  • Size 790KB
  • Sample260820-pamb6sbp21
  • SHA256 4831a47c881004f1527dc5647c9c939d3fcf5b3e461a34f31d6137a594b34292
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • update.zip
    .zip 790KB
  • 1.bat
    1KB
  • LockScreenContentServer.exe
    .exe 48KB
  • dui70.dll
    .dll 2.0MB

update.zip

  • SHA256 4831a47c881004f1527dc5647c9c939d3fcf5b3e461a34f31d6137a594b34292
  • MD5 SHA1 SHA512 SSDEEP TLSH