General

  • Target
    packagecache_x64_data.zip
  • Size 4.8MB
  • Sample261031-1bppgaes9s
  • SHA256 026914e2fc0e2b652e07862f5761299e3839f43bff65d43b14449c54d29978bd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • packagecache_x64_data.zip
    .zip 4.8MB
  • borlndmm.dll
    .dll 50.8MB
  • packagecache_x64_data.exe
    .exe 3.4MB

packagecache_x64_data.zip

  • SHA256 026914e2fc0e2b652e07862f5761299e3839f43bff65d43b14449c54d29978bd
  • MD5 SHA1 SHA512 SSDEEP TLSH