261029-zmjrxsfvsw_pw_infected[.]zip

General

Target
261029-zmjrxsfvsw_pw_infected.zip
Size 202KB
Sample261030-xcv14aev81
SHA256 b35e8839e38ce2c92db7649cea79b18c00a84614cb55c23f37232f841c2b260f
MD5 24667e6b62dd26f841d0f203310e6bf2
SHA1 ad0c9e6eee4811dcf6e5fcf10b3b32237e7dcf62
SHA512 8f99f3a18f03cc835326643fc989dbcac2ca8459e67ed34c7be5c82d67b78d1c277694aab6ee739d666b7a5d04a528cf58e16197bfcd9ae5c2075082d1057f5f
SSDEEP 3072:uh4GHMjaMwqQZOyPIaVfE0fVy66HlX0INmiSjqCDBL672ztmsbN:yHMjaMwZPIT09WRjoG7+M2N
TLSH
T1821423DE17AEA7B0DC464CD34E6A62D5DBF55648E16288BEF34A8C20D8633C4F557320
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/73076c366edd5b8b351f04725663d2189a92dfdc93cc34740a61a1de9bbde51e

File Explorer

261029-zmjrxsfvsw_pw_infected.zip

.zip 202KB
73076c366edd5b8b351f04725663d2189a92dfdc93cc34740a61a1de9bbde51e

.dll 302KB

261029-zmjrxsfvsw_pw_infected.zip

SHA256 b35e8839e38ce2c92db7649cea79b18c00a84614cb55c23f37232f841c2b260f
MD5 24667e6b62dd26f841d0f203310e6bf2
SHA1 ad0c9e6eee4811dcf6e5fcf10b3b32237e7dcf62
SHA512 8f99f3a18f03cc835326643fc989dbcac2ca8459e67ed34c7be5c82d67b78d1c277694aab6ee739d666b7a5d04a528cf58e16197bfcd9ae5c2075082d1057f5f
SSDEEP 3072:uh4GHMjaMwqQZOyPIaVfE0fVy66HlX0INmiSjqCDBL672ztmsbN:yHMjaMwZPIT09WRjoG7+M2N
TLSH
T1821423DE17AEA7B0DC464CD34E6A62D5DBF55648E16288BEF34A8C20D8633C4F557320
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

73076c366edd5b8b351f04725663d2189a92dfdc93cc34740a61a1de9bbde51e

IMPHASH 46d91fa91d59aa95f9e126dd5f59eb29
SHA256 73076c366edd5b8b351f04725663d2189a92dfdc93cc34740a61a1de9bbde51e
MD5 9811fae777173f8913b69d2d2adfbfa7
SHA1 60aece343959a2e1840f6aaeffa38b73ed21af2c
SHA512 83453592668546e09a2ee8e21fca7e578ca63f58f42b1d6e2713afb3b37813a0b46f5b1334bdd80da984911253d3667ed1ded9bfa88b1ae4b32d4afc3e578918
SSDEEP 6144:grI+EINJ8ZMto0CBu/R0HhXPcNirm5qZpvEO1/A1g:LbINaittZ3NwpHV
TLSH
T16F642385541E12B0C22B37BB0C57943CF9341BF4ACBEB19FE866DAA7F62E142613B541
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

4176

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

261029-zmjrxsfvsw_pw_infected.zip

73076c366edd5b8b351f04725663d2189a92dfdc93cc34740a61a1de9bbde51e

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

261029-zmjrxsfvsw_pw_infected.zip

73076c366edd5b8b351f04725663d2189a92dfdc93cc34740a61a1de9bbde51e

kernel32

generic