BankDetails[.]tar | Triage™

General

Target
BankDetails.tar
Size 937KB
Sample261110-phrxmaxw6r
SHA256 ba7b0aecc8a63111cdee0250b1346071c17867eba777decddb80cb8d2674555a
MD5 e86667cf54d83aa260469660dfd8c683
SHA1 8aa13e4b10c441551fa8de8bd5cd59f11728eebc
SHA512 45d04a3226069093844f204fdf40122db488a16848ed962de3409ac0961d7d527fa49de5225883836865d54ffffa323335c9df3305a3bea5020dc29f70c5d86b
SSDEEP 24576:dWF9zQ1gh8laHfXAgtS+k1C5aNE4awVvMn:wYahOaHfwgthqC5a6n
TLSH
T13E15DF0032A9EA02E5B657F4C871E2F913B13D49EA30D24B4EE6BDDB3A36B406D54753
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BankDetails.bat

File Explorer

BankDetails.tar

.tar 937KB
BankDetails.bat

.exe 935KB

BankDetails.tar

SHA256 ba7b0aecc8a63111cdee0250b1346071c17867eba777decddb80cb8d2674555a
MD5 e86667cf54d83aa260469660dfd8c683
SHA1 8aa13e4b10c441551fa8de8bd5cd59f11728eebc
SHA512 45d04a3226069093844f204fdf40122db488a16848ed962de3409ac0961d7d527fa49de5225883836865d54ffffa323335c9df3305a3bea5020dc29f70c5d86b
SSDEEP 24576:dWF9zQ1gh8laHfXAgtS+k1C5aNE4awVvMn:wYahOaHfwgthqC5a6n
TLSH
T13E15DF0032A9EA02E5B657F4C871E2F913B13D49EA30D24B4EE6BDDB3A36B406D54753
MD5 SHA1 SHA512 SSDEEP TLSH

BankDetails.bat

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 209ccfc4aaa31f4f4d323a8eddbe33be8032d1f7ea3f69d35df03e8fae78f9b7
MD5 1722e7678d28b589872f63d19a6c6e53
SHA1 12eb245c0117f566485b2db5c23ff5e7bd049161
SHA512 d005f2fbc93f639bddf8204b936c214f4db1ed931c263919a85e79c3245d649aff45fd70a2639ed6fcf06367fa8bfe1f8590f22492fe48139caa5b172d8d118a
SSDEEP 24576:zWF9zQ1gh8laHfXAgtS+k1C5aNE4awVvMn:aYahOaHfwgthqC5a6n
TLSH
T17915DF0032A9EA02E5B657F4C871E2F913B13D49EA30D24B4EE6BDDB3A36B406D54753
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

963254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

BankDetails.tar

BankDetails.bat

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

BankDetails.tar

BankDetails.bat

mscoree

dotnet