General

  • Target
    JK-18005144.zip
  • Size 1.9MB
  • Sample261015-pf5qpscw71
  • SHA256 07806661d056305e832b509a1b517241420d8aa6bccadaff5e0768d5131406fd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 14 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • JK-18005144.zip
    .zip 1.9MB
  • JK-18005144.img
    .iso 5.3MB
  • Notice from Tax Departmen.exe
    .exe 1021KB
  • libvlc.dll
    .dll 2.1MB
  • msvcp120.dll
    .dll 644KB
  • msvcp140.dll
    .dll 572KB
  • msvcp140_1.dll
    .dll 25KB
  • msvcp140_2.dll
    .dll 252KB
  • msvcp140_atomic_wait.dll
    .dll 39KB
  • msvcp140_codecvt_ids.dll
    .dll 21KB
  • vccorlib140.dll
    .dll 336KB
  • vcruntime140.dll
    .dll 127KB
  • vcruntime140_1.dll
    .dll 58KB
  • vcruntime140_threads.dll
    .dll 27KB

JK-18005144.zip

  • SHA256 07806661d056305e832b509a1b517241420d8aa6bccadaff5e0768d5131406fd
  • MD5 SHA1 SHA512 SSDEEP TLSH