MV 2.7.1 version-5a21b87bbc2641cf.zip
- SHA256 062bdf72303181fbde20be31f5fa1b693b2746f4f5a6afa527892d25274161f4
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MV 2.7.1 version-5a21b87bbc2641cf.zip
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
13 signatures
900 seconds
Behavioral task
behavioral2
Sample
eurotrucks2.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
5 signatures
900 seconds
General
- Target MV 2.7.1 version-5a21b87bbc2641cf.zip
- Size 20.0MB
- Sample261102-ma925agy5x
- SHA256 062bdf72303181fbde20be31f5fa1b693b2746f4f5a6afa527892d25274161f4
- MD5 0afdfd12d9253e4b4c7ca33a9b88faa8
- SHA1 b7e4bb8d3b64c5574ab488feaa80a2e8ca706d38
- SHA512 e3a03927d5572d3fe4ec9cea56e4af2769e76d7405623477f9fd641c2287a9e4e914675d2050427eedae0140de3ac8b0eaae45169a480a337d3aa0167f4bee06
- SSDEEP 393216:IOG7uKjt694jVRezVFq9iBDa3/XI54/wfGs7kKYxa/o3G4ti72d0pfv/yStOqaXQ:IOXKZMwjeo3/t/kGs7kK07GWi7q0pn6o
- TLSH T18A273383F85EEA182EC60D25BF146B07154CB7B531ED1856ACF3F668997034ED42E83A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/eurotrucks2.exe
File Explorer
-
MV 2.7.1 version-5a21b87bbc2641cf.zip.zip 20.0MB
-
eurotrucks2.exe.exe 24.2MB
eurotrucks2.exe
- IMPHASH e6edc8fd549428a16478b2bd793c00fd
- SHA256 4c99840eb01bf850eae092031bfda30ef6f0e2328bad5a777e073162637a41b6
- MD5 ef21ec5fb4808a0286ba408475d1e6d9
- SHA1 0a4c37b25e57720372f64359fba3f331a66d0cf9
- SHA512 fe80373c09201f9d02b7a61c08ad0a13a0f31d9d32aaf0675f7d13ec198e7e9a9f6733bf95a194f3ff5cc6b7c0fb9a6355f4c5ec1e22c46d548984d1c83c2203
- SSDEEP 393216:oiLRedHpK1Spw4/Bi2abKDie6YxCtKuxeL8/o75Bp+mlIwqocECu:oitGJKAGnKDie6dK8eLWo7f4mlIwqE7
- TLSH T11C4712D628D160ECC892C534E38A1FFDE1D979898EB9582FBFC359012931D86CCA5937
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
27940940
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
./.\kernel32
ReadConsoleW
.\user32
GetKeyState
./shell32
ShellExecuteW
.\./msvcp140
?always_noconv@codecvt_base@std@@QEBA_NXZ
.\d3d11
D3D11CreateDeviceAndSwapChain
.\d3dcompiler_47
D3DCompile
./dxgi
CreateDXGIFactory1
./.\dwmapi
DwmSetWindowAttribute
./avrt
AvSetMmThreadCharacteristicsW
.\.\pdh
PdhCloseQuery
.\imm32
ImmSetCandidateWindow
.\vcruntime140_1
__CxxFrameHandler4
.\vcruntime140
__std_exception_destroy
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsscanf
api-ms-win-crt-heap-l1-1-0
free
api-ms-win-crt-string-l1-1-0
_stricmp
api-ms-win-crt-time-l1-1-0
_localtime64_s
api-ms-win-crt-runtime-l1-1-0
abort
api-ms-win-crt-filesystem-l1-1-0
_lock_file
api-ms-win-crt-convert-l1-1-0
atoi
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-math-l1-1-0
powf
kernel32
GetSystemTimeAsFileTime
Name
Size
Virtual Size
517KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
166KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
L#=]F8kF
Size
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
j?*(}avk
Size
Virtual Size
776B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
56.wv9P:
Size
Virtual Size
15.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
?S<Kn"^m
Size
512B
Virtual Size
440B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UNMgo'B9
Size
24.2MB
Virtual Size
24.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
469B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ