25736258570[.]zip | Triage™

General

Target
25736258570.zip
Size 814KB
Sample260821-efgnrsscle
SHA256 8a901ebd40dfd4cef31f0689c520e6b0d83c9467f0aaa944a4353c69222c0a36
MD5 6e0465c6879425220cf54dcde02bd015
SHA1 e4e286f99861ecb7cea1bd8c1fef436e9a06e7ce
SHA512 165d872b40f98e54d7f437138e89300746f71301df12cc3a31ba79d04e085502651bae5a2a389b2160edcd9513c30cebdacf304cd1f59a81d9abfb996b7aa986
SSDEEP 24576:gL+GZ2rW7hgcgbVzAKfKy4VxaQl0OTw7d28aZw1n:gLvZokLg1C5l0YwJcw1n
TLSH
T1850533E190FC7EEF85C9445A126BCCCA342DB1C3B746A6623D3CC14DD832996B90A976
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/981dadc1a7ab50d6ff600a69c904a350fcc2d2050ac94589321f51ac5527c78d

File Explorer

25736258570.zip

.zip 814KB
981dadc1a7ab50d6ff600a69c904a350fcc2d2050ac94589321f51ac5527c78d

.exe 2.3MB

25736258570.zip

SHA256 8a901ebd40dfd4cef31f0689c520e6b0d83c9467f0aaa944a4353c69222c0a36
MD5 6e0465c6879425220cf54dcde02bd015
SHA1 e4e286f99861ecb7cea1bd8c1fef436e9a06e7ce
SHA512 165d872b40f98e54d7f437138e89300746f71301df12cc3a31ba79d04e085502651bae5a2a389b2160edcd9513c30cebdacf304cd1f59a81d9abfb996b7aa986
SSDEEP 24576:gL+GZ2rW7hgcgbVzAKfKy4VxaQl0OTw7d28aZw1n:gLvZokLg1C5l0YwJcw1n
TLSH
T1850533E190FC7EEF85C9445A126BCCCA342DB1C3B746A6623D3CC14DD832996B90A976
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

981dadc1a7ab50d6ff600a69c904a350fcc2d2050ac94589321f51ac5527c78d

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 981dadc1a7ab50d6ff600a69c904a350fcc2d2050ac94589321f51ac5527c78d
MD5 02ebc2356f9f700bbdac444cdefa0da2
SHA1 7ee2e8ec5524b3066b7f420dc5385569b54efbfe
SHA512 adb86240e8ce80421d7a355328bc81b2ad2242f199275542febe2376bdc9b9c5feeb65f75a98c8e4d4a922cc0c5f09988d3e6ff247d05a56bc4b0835f7916f6e
SSDEEP 24576:yKY7pNtZ8coStzco6c9tJbZkFAuSu50a5r7wWedUsjX33x9NPUPI9ZE1/W4vLPNz:YdjJbvuSTWe6sjXxJZeTvLPNMAI
TLSH
T14BB56D00BBE8CE27D1BF67B3A4B102152BF4E546E7A2FB4B564426B92D427402D453BF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

2359078

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

25736258570.zip

981dadc1a7ab50d6ff600a69c904a350fcc2d2050ac94589321f51ac5527c78d

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

25736258570.zip

981dadc1a7ab50d6ff600a69c904a350fcc2d2050ac94589321f51ac5527c78d

mscoree

dotnet