New WinRAR archive.rar
- SHA256 c5c93055ea0820aab3c3ffeaf0b2b6ccb72a11270310142b79afce830a108e4e
Static task
static1
1 signatures
General
- Target New WinRAR archive.rar
- Size 18.5MB
- Sample261113-wl52zset3k
- SHA256 c5c93055ea0820aab3c3ffeaf0b2b6ccb72a11270310142b79afce830a108e4e
- MD5 62a003934413bc9698a07a08a0660de8
- SHA1 cbc2188eceebb28c550ffcb3b44510ce1c9c6513
- SHA512 1b050d7dc222eea555f3e41ae01907addddc8f710003c37b86bdb528d6d943919617b9480af09081fc07f79c966c8fba2c070291fdce7b4f66c4ea5696dde733
- SSDEEP 393216:H4s8D6ksHrHDcJYVJOQNi8XCAmzTRFaGl0sYx4xz0v9wNnpNc9gFwkL:sD6ksHcJwgQNbJhGWsVz69w1r5L
- TLSH T1BC173361F91C3E671609A68634E30EBE2D09D120C95DBAB9586F5E5833D8BBC4FF8170
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2.exeCleaned-cleaned_Slayed.exe
File Explorer
-
New WinRAR archive.rar.rar 18.5MB
-
2.exeCleaned-cleaned_Slayed.exe.exe 19.1MB
-
IttihadRAT v1.2.exe.config.xml 5KB
2.exeCleaned-cleaned_Slayed.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6ef5fd4a12fa3212da29e29cca63e2a0c02eb73b271f3694e66a0245a7dbcd04
- MD5 e215f190a39883aeadb7eda63b3f6d08
- SHA1 e1987b9c99f867c9621e7752517dcdb4d8353c15
- SHA512 f4aaf8611cdb938d6ac7459d54d0e4fb5376289157c6b10ff96e338a8835708a6946e822f606b599e8919d260e163252228331ef8d98cba389e54e991802a9d1
- SSDEEP 393216:ONAPalGYFMNM5OgUpYzuIecBKG0boNTGnNAQHgr1jMglBxh:FakYoM51zHtebQTupAus/h
- TLSH T1CB17333437E39A27E0A15777559A5945CB7ADDF1A307730B3DC0A21B2CA2B0E4F422E9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19852222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
18.9MB
Virtual Size
18.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
165KB
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
IttihadRAT v1.2.exe.config
- SHA256 b540e7697dda46f5d60f5c963e4db7a3b908e1e0a97756abb035482396958518
- MD5 99159dc780341927b9e588b880fcd68a
- SHA1 29060c07aef28a96effa00f7495870dcef32833c
- SHA512 e389e12e5451236692b964fb3fa3c1dde34a393dba0bcabcb65e294b9edd96292b6928d0db0b004e59887a4026ff7ce035316fa26e0229910aa771d1f1ca61a0
- SSDEEP 96:ur71Y7KT7KTrZ0BGivir/273I2TpV6RF4DVI60BGiviR273I2TpV6RZGoKS4Ypym:ur7S7O7kr9evGoKS/pv7sJ+J/qJvS
- TLSH T1FEB1D408B1C19E9A02366B32EB3056D1EDA006671176B4F478ED31679F71CDB4BB33A6
- MD5 SHA1 SHA512 SSDEEP TLSH