General

  • Target
    889e3c9b82b83485a2f4c2862c2ca2290e9312a9306b97c4e424f8b09265c7ec
  • Size 2.0MB
  • Sample260928-d8ty5avyht
  • SHA256 889e3c9b82b83485a2f4c2862c2ca2290e9312a9306b97c4e424f8b09265c7ec
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 889e3c9b82b83485a2f4c2862c2ca2290e9312a9306b97c4e424f8b09265c7ec
    .zip 2.0MB
  • 115Q3申報清單.img
    .iso 5.3MB
  • 115Q3申報清單.exe
    .exe 343KB
  • DriverLib.dll
    .dll 387KB
  • _Bottom.dat
    35KB
  • _Driver.cnf
    760KB
  • _Top.dat
    453KB
  • _Versatility.dat
    9KB
  • appshare.dll
    .dll 251KB
  • mediastores.dll
    .dll 248KB
  • msvcp140.dll
    .dll 553KB
  • msvcp140_1.dll
    .dll 25KB
  • msvcp140_2.dll
    .dll 252KB
  • msvcp140_atomic_wait.dll
    .dll 39KB
  • msvcp140_codecvt_ids.dll
    .dll 21KB
  • util.dll
    .dll 1.4MB
  • vccorlib140.dll
    .dll 336KB
  • vcruntime140.dll
    .dll 108KB
  • vcruntime140_1.dll
    .dll 38KB
  • vcruntime140_threads.dll
    .dll 27KB

889e3c9b82b83485a2f4c2862c2ca2290e9312a9306b97c4e424f8b09265c7ec

  • SHA256 889e3c9b82b83485a2f4c2862c2ca2290e9312a9306b97c4e424f8b09265c7ec
  • MD5 SHA1 SHA512 SSDEEP TLSH