26439786964[.]zip | Triage™

General

Target
26439786964.zip
Size 548KB
Sample261102-dyashaew6v
SHA256 1bf6789ebfcd02cbdda7c789ac337e2d8703f0cb5efd58f48af49485791a35b1
MD5 fee8d81e5486759ecd5cfa74c2886af6
SHA1 a493a261e5fb732989bc871a498cab143b674a06
SHA512 2989c0133ab248c503c564529756ebd501182d4837b40205a575c886f8c494378ebb389419a3509c17320d9e06d4dc593b09fba15da7e9f0cfaaaebeae58da54
SSDEEP 12288:tiNLbgqu6C+r7kmxfEjitjOX4C34FQqvT+YLgHhacnsBd:6bnu3LmCjitj7CIFQqLDrcnsBd
TLSH
T153C423294EC632F1DD7FDE777F988CEAA0C77F41DA0604E994070896248D6A9CD2D839
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0007c663caa573043f8d5c443dfe7f1ed1fbad4f7929452a529fff13373ffa45

File Explorer

26439786964.zip

.zip 548KB
0007c663caa573043f8d5c443dfe7f1ed1fbad4f7929452a529fff13373ffa45

.exe 551KB

26439786964.zip

SHA256 1bf6789ebfcd02cbdda7c789ac337e2d8703f0cb5efd58f48af49485791a35b1
MD5 fee8d81e5486759ecd5cfa74c2886af6
SHA1 a493a261e5fb732989bc871a498cab143b674a06
SHA512 2989c0133ab248c503c564529756ebd501182d4837b40205a575c886f8c494378ebb389419a3509c17320d9e06d4dc593b09fba15da7e9f0cfaaaebeae58da54
SSDEEP 12288:tiNLbgqu6C+r7kmxfEjitjOX4C34FQqvT+YLgHhacnsBd:6bnu3LmCjitj7CIFQqLDrcnsBd
TLSH
T153C423294EC632F1DD7FDE777F988CEAA0C77F41DA0604E994070896248D6A9CD2D839
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected123

0007c663caa573043f8d5c443dfe7f1ed1fbad4f7929452a529fff13373ffa45

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 0007c663caa573043f8d5c443dfe7f1ed1fbad4f7929452a529fff13373ffa45
MD5 14af8a73d3a684459c1b4552fbfa693c
SHA1 7d3f7740b2b2cde7546c9223fa4a7f3502802384
SHA512 62e1750e9f3b66ccfe865307425bed1d0314937ac9444c857373dd39c3fd2d0b6d8e62ef086a8ec38bc7b4b6a3640e24677cb6ed26f4bde618a146378fcdeae6
SSDEEP 12288:Yjj2GrFXslFqJXUburXcpQ6Sh1EIM68NnL0hQHQ6GCkXwK7hUdXTjZyBv0Zk9N:nGrYFXbWcpQHzW6QnL0s6wK7udXTjZgJ
TLSH
T127C4238473163ACFD3F04F3A7F8468D9C1F62EC5A4762FD49A021E700A679259C61AF9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected123

Minor OS version

0

Major OS version

4

Entry point

570046

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\ctjs19jr\obj\Release\' .pdb

26439786964.zip

0007c663caa573043f8d5c443dfe7f1ed1fbad4f7929452a529fff13373ffa45

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

26439786964.zip

0007c663caa573043f8d5c443dfe7f1ed1fbad4f7929452a529fff13373ffa45

mscoree

dotnet