0d736040f6fcab61ef390639d0f9deb1270c8b3492dd7abd9cdc8ec43a100364[.]zip

General

Target
0d736040f6fcab61ef390639d0f9deb1270c8b3492dd7abd9cdc8ec43a100364.zip
Size 255KB
Sample260830-13kvlade98
SHA256 e8bdbd96cb33b0e92cd7bae8f64e6599627dc3df656fc0a31435cd2bc06bd9a4
MD5 0017fdb8b5d6e5ef908cad3412eef910
SHA1 a2bcb0e1d872dd0f4db64c02133d00f7ae2680ce
SHA512 746507397c93fda19c64d61d74dc336a92498294368132575c0e0a296524c395a801ac9a72f29d65af93c4a56c3b41b290335e3a85766e217d293ae39a8a9519
SSDEEP 6144:GiN6DXyBxVhxC9QuqV42xUlihOm9Qf9o+skjOa:GiN6DCLVhxCeG2xUlicmGf6+H
TLSH
T12244232435D8B730E838995FDF541C3DEF64492B9748FAC7644828BB125B751838B8AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0d736040f6fcab61ef390639d0f9deb1270c8b3492dd7abd9cdc8ec43a100364.exe

File Explorer

0d736040f6fcab61ef390639d0f9deb1270c8b3492dd7abd9cdc8ec43a100364.zip

.zip 255KB
0d736040f6fcab61ef390639d0f9deb1270c8b3492dd7abd9cdc8ec43a100364.exe

.exe 462KB

0d736040f6fcab61ef390639d0f9deb1270c8b3492dd7abd9cdc8ec43a100364.zip

SHA256 e8bdbd96cb33b0e92cd7bae8f64e6599627dc3df656fc0a31435cd2bc06bd9a4
MD5 0017fdb8b5d6e5ef908cad3412eef910
SHA1 a2bcb0e1d872dd0f4db64c02133d00f7ae2680ce
SHA512 746507397c93fda19c64d61d74dc336a92498294368132575c0e0a296524c395a801ac9a72f29d65af93c4a56c3b41b290335e3a85766e217d293ae39a8a9519
SSDEEP 6144:GiN6DXyBxVhxC9QuqV42xUlihOm9Qf9o+skjOa:GiN6DCLVhxCeG2xUlicmGf6+H
TLSH
T12244232435D8B730E838995FDF541C3DEF64492B9748FAC7644828BB125B751838B8AF
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

0d736040f6fcab61ef390639d0f9deb1270c8b3492dd7abd9cdc8ec43a100364.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 0d736040f6fcab61ef390639d0f9deb1270c8b3492dd7abd9cdc8ec43a100364
MD5 bcc045419794480cd9afb160123ce04d
SHA1 963196a591d532d5d162550e4a363d0dd4783882
SHA512 f2e5d57d27aef98b39d93fb29eb5ebccf2411c2618ac8241859fd1b3c1a6a597995662f504bdaedcb09fe88bf4770ba148a37e907c0755580bd23a1c3fce3014
SSDEEP 6144:kqAEMWEhW4s4I8if5Xh/slOvJXMbJZSfG9BPTmrrUurtrTjjTGpzHXEOYV0cVffN:pEQpvXcO6/SfG+rvrtr3OZHSiT+F
TLSH
T105A47BA457FC4B25E6FF1B3D9831544847BAFF4BE839EB6D4A10A8E91D237416810B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

478382

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Administrator\AppData\Local\LX_CRYPTER\Temp\LX_AYkvMzqX_0W\ILRepack-2104-688697\LX_AYkvMzqX_0W.pdb

0d736040f6fcab61ef390639d0f9deb1270c8b3492dd7abd9cdc8ec43a100364.zip

0d736040f6fcab61ef390639d0f9deb1270c8b3492dd7abd9cdc8ec43a100364.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

0d736040f6fcab61ef390639d0f9deb1270c8b3492dd7abd9cdc8ec43a100364.zip

0d736040f6fcab61ef390639d0f9deb1270c8b3492dd7abd9cdc8ec43a100364.exe

mscoree

dotnet