General

  • Target
    sniper_sideloader.zip
  • Size 3.1MB
  • Sample260916-thf8casfmc
  • SHA256 b5a50ef1c3a8d0b82ecda161a229f9844cd84dbb640df507e83f26725188e0a0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • sniper_sideloader.zip
    .zip 3.1MB
  • VCRUNTIME140.dll
    .dll 83KB
  • VCRUNTIME140_1.dll
    .dll 48KB
  • glib-2.0.dll
    .dll 1.2MB
  • gmodule-2.0.dll
    .dll 29KB
  • gobject-2.0.dll
    .dll 293KB
  • intl.dll
    .dll 109KB
  • pcre.dll
    .dll 402KB
  • sniper.exe
    .exe 108KB
  • vmtools.dll
    .dll 867KB

sniper_sideloader.zip

  • SHA256 b5a50ef1c3a8d0b82ecda161a229f9844cd84dbb640df507e83f26725188e0a0
  • MD5 SHA1 SHA512 SSDEEP TLSH