General

  • Target
    Повестка.img
  • Size 2.2MB
  • Sample261012-ls824sbc68
  • SHA256 bd4f16a204e56ab9b8f8b0024e7d07490ba26cdc5b84563c4beab02890effdaa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Повестка.img
    .iso 2.2MB
  • out.iso
    .iso 2.2MB
  • concrt140.dll
    .dll 309KB
  • doc.pdf
    .pdf 606KB
  • libcares-2.dll
    .dll 258KB
  • libcares-2_orig2.dll
    .dll 270KB
  • msvcp140.dll
    .dll 576KB
  • vcruntime140.dll
    .dll 99KB
  • vcruntime140_1.dll
    .dll 43KB
  • Повестка.exe
    .exe 63KB

Повестка.img

  • SHA256 bd4f16a204e56ab9b8f8b0024e7d07490ba26cdc5b84563c4beab02890effdaa
  • MD5 SHA1 SHA512 SSDEEP TLSH