PANEL SOPRANOS[.]rar

General

Target
PANEL SOPRANOS.rar
Size 9.1MB
Sample260910-lf4lvsgd49
SHA256 61ae95b4159713b5266c2bd485215a41a7692c8e0ec15064bff5084e0f8b9ec1
MD5 7766d476fb5e9e43b8112664df0dd1f1
SHA1 36c6fabd2e6849e83d0ceb371130fabb2910e2cb
SHA512 b0512fad2778c21dc3fc99f97139f3ee4573f05ca57b7fb67d339ea4acb2adf4a53c23b449153d495f44ec5da0080f5d623d59ee9e4f9e53460bed5f58f4676a
SSDEEP 196608:jcXwse94fMZfyUmewG4/UZ3g64+uIAORa/IvWhYKhCLdyyruv:jcXwsgp4/aQ64+u/ORuIvcTyK
TLSH
T1B1A6332352BC445D94250BA4DE017597FB7BE4446C0E359FCB2C233BAF3A9610AD98AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PANEL SOPRANOS.exe
unpack002/costura.dll

File Explorer

PANEL SOPRANOS.rar

.rar 9.1MB
PANEL SOPRANOS.exe

.exe 28.4MB
costura.dll

.dll 5KB
costura.pdb

7KB

PANEL SOPRANOS.rar

SHA256 61ae95b4159713b5266c2bd485215a41a7692c8e0ec15064bff5084e0f8b9ec1
MD5 7766d476fb5e9e43b8112664df0dd1f1
SHA1 36c6fabd2e6849e83d0ceb371130fabb2910e2cb
SHA512 b0512fad2778c21dc3fc99f97139f3ee4573f05ca57b7fb67d339ea4acb2adf4a53c23b449153d495f44ec5da0080f5d623d59ee9e4f9e53460bed5f58f4676a
SSDEEP 196608:jcXwse94fMZfyUmewG4/UZ3g64+uIAORa/IvWhYKhCLdyyruv:jcXwsgp4/aQ64+u/ORuIvcTyK
TLSH
T1B1A6332352BC445D94250BA4DE017597FB7BE4446C0E359FCB2C233BAF3A9610AD98AF
MD5 SHA1 SHA512 SSDEEP TLSH

Password

1

PANEL SOPRANOS.exe

SHA256 1ed4d4ec9f8e94af013989631a6a4b11b5ec00d76000bb5f38efcd4a817b3d94
MD5 98c041bd3ebb34ad5678ebec677142f1
SHA1 9236a63e9259c64ebaeed5b1a6d930c749fefc49
SHA512 fba59693c0c82c449989cc82ff7535a472270a2911c4635021a5955ad856fc8717848643c17f528b7ad0f76daca45da896ec46f6a601679b4120572bed86f536
SSDEEP 393216:JzdVAx1T9TaHWsQYHfd5jKu2Ym932SyRl9A:DVA1GRfTKu2j9GSIl9A
TLSH
T13F674A0263ECBDD4E1729634E73783F1CB7DFC259611C20F0594F94A3A7A942B9663A2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

1

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\SUPER\source\repos\PANEL SOPRANOS\PANEL SOPRANOS\obj\Debug\PANEL SOPRANOS.pdb

costura.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6771700a3bbd39251648d73bae181c3a4fa978ac40cccf4d5e2ac7815f18b406
MD5 27180a8ccb9c7d93bc5e1a95d67d3dbe
SHA1 31531eea4711cf48d5e834ff92738769389ee1cd
SHA512 f7ef2014320f82ff98c825b90a7229d74fe39b0e33fa7826b35f214dd5c51918c61e63acae8c19c42d817bd6ad571c9983766516c791b304db697df9dc5cf564
SSDEEP 48:6vP2nhx3BTjtRiaAVLEF4iZ6iMtTg706YElaWTJFu2FY+cYH6AWk1qyFVw2Ib8:JHtRYVLE4YjYELTru2FZFWv2
TLSH
T1A6B1FB28A7B8533BEF7BCB72585353804374BD10D92B5B1F1AC562172C323948931722
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\CI_WS\Ws\303409\Source\Costura_Fody\src\Costura\obj\Release\netstandard2.0\Costura.pdb

PANEL SOPRANOS.rar

PANEL SOPRANOS.exe

generic

costura.dll

mscoree

dotnet

costura.pdb

Sharing

General

Malware Config

Signatures

File Explorer

PANEL SOPRANOS.rar

PANEL SOPRANOS.exe

generic

costura.dll

mscoree

dotnet

costura.pdb