General

  • Target
    iphlpapi.zip
  • Size 65.7MB
  • Sample261017-kdaqbsea35
  • SHA256 25028b75dd4eff63d6ff8a773730c6e42cfe7136e5c4b22c0406d90931fd3971
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • iphlpapi.zip
    .zip 65.7MB
  • iphlpapi.dll
    .dll 6.5MB
  • metashape.exe
    .exe 133.9MB

iphlpapi.zip

  • SHA256 25028b75dd4eff63d6ff8a773730c6e42cfe7136e5c4b22c0406d90931fd3971
  • MD5 SHA1 SHA512 SSDEEP TLSH