General

  • Target
    ghanioilandgas.zip
  • Size 4.2MB
  • Sample260827-pp7xesvcmc
  • SHA256 0002ee6e0f4f940037033aac89a61099752af07b19ac92f2643d86ce5275ba62
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • ghanioilandgas.zip
    .zip 4.2MB
  • libiconv-2.dll
    .dll 1.1MB
  • libidn2-0.dll
    .dll 251KB
  • libintl-8.dll
    .dll 301KB
  • libpsl-5.dll
    .dll 1.5MB
  • libunistring-5.dll
    .dll 2.1MB
  • msvcp140.dll
    .dll 540KB
  • psl.exe
    .exe 64KB
  • ucrtbase.dll
    .dll 1.3MB
  • vcruntime140.dll
    .dll 120KB
  • vcruntime140_1.dll
    .dll 46KB

ghanioilandgas.zip

  • SHA256 0002ee6e0f4f940037033aac89a61099752af07b19ac92f2643d86ce5275ba62
  • MD5 SHA1 SHA512 SSDEEP TLSH