30092026_1041_29092026_Invoice_Packing_List[.]7z

General

Target
30092026_1041_29092026_Invoice_Packing_List.7z
Size 712KB
Sample260930-mrdp9ax18p
SHA256 01fb63355f3a4774589260f178720091856c17871ea2c6f62b80e5acf3979312
MD5 5bb5562532bbe0466aec3f54ab3339ae
SHA1 06247265a7754b7080534666815c5201817d627f
SHA512 3ae6c0f08b7fc79bd46800431b7e1f97495bf3741b993e730c71cfecc9d66b1f7bb9297172293a0c4ce780285cd73ed1d892eb8eeb47a0eb30ec6cdf2b30d34d
SSDEEP 12288:f6AWMnVkyD0ns1U71rf7fNmjBF+9NUBNUsqybKiL7gCTKNULdf2Rz1VMkFt7G6Og:f6AWMctfNmjr4Iuy2S7g1UAN1VM4q62c
TLSH
T107F433B35DB34143A37703B7145C572B1F9329FA28D0BDE5709516A620B60B09BAABCF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Invoice_Packing_List.com

File Explorer

30092026_1041_29092026_Invoice_Packing_List.7z

.rar 712KB
Invoice_Packing_List.com

.exe 795KB

30092026_1041_29092026_Invoice_Packing_List.7z

SHA256 01fb63355f3a4774589260f178720091856c17871ea2c6f62b80e5acf3979312
MD5 5bb5562532bbe0466aec3f54ab3339ae
SHA1 06247265a7754b7080534666815c5201817d627f
SHA512 3ae6c0f08b7fc79bd46800431b7e1f97495bf3741b993e730c71cfecc9d66b1f7bb9297172293a0c4ce780285cd73ed1d892eb8eeb47a0eb30ec6cdf2b30d34d
SSDEEP 12288:f6AWMnVkyD0ns1U71rf7fNmjBF+9NUBNUsqybKiL7gCTKNULdf2Rz1VMkFt7G6Og:f6AWMctfNmjr4Iuy2S7g1UAN1VM4q62c
TLSH
T107F433B35DB34143A37703B7145C572B1F9329FA28D0BDE5709516A620B60B09BAABCF
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Invoice_Packing_List.com

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 12c1bd2c203bde00d3c5dd2b018362c68435f7ba91ccc14c1fce94f4161a1f27
MD5 2c0aa858fbb0aacf9e60b988aa18fe54
SHA1 e0068daef4f1c681263fbe52ecd621f5622ff6d2
SHA512 870ce43e5eacb6d51cc81b57b06a093be8a2f73d5896fd5bbed99c48e1301bb6701bd34b7b11ca8fd9e4859b61113177ae9f5481b0941627f054b88c5a0b07ca
SSDEEP 12288:LZbBkAa0PneHin7Q89d7eJsS6HAQkMc8idwGzrOJgQmL1W4FoxoBQh:hi62HqMyqKHH9MdLztQmL1z/BQ
TLSH
T15F0501502728DA12D4A917F909B1F33907FA6E4EA420D32A4FE8FCF73D23B516954693
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

818970

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

30092026_1041_29092026_Invoice_Packing_List.7z

Invoice_Packing_List.com

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

30092026_1041_29092026_Invoice_Packing_List.7z

Invoice_Packing_List.com

mscoree

dotnet