General

  • Target

    Downloads.rar

  • Size

    124.0MB

  • MD5

    1d12c2567abd6b5970caecc54226d137

  • SHA1

    d6cb162d353f9fdb601836226005967eaedd9a47

  • SHA256

    1bf6d14c4b5f59aa30882f4aa25e9e9d703dac905a785fe020ff667600e5fc97

  • SHA512

    f0f1e7cee1d5f1e47fcbfb46723e3b7c327b407c2a956fe8a710efe8119b3396c230e1b0a18f6f91ee196784576a5a0c1e22548d4f4c78163dfff1a804ea02e8

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • NSIS installer 4 IoCs

Files

  • Downloads.rar
    .rar
  • 1.bin/1.bin
    .exe windows x86


  • 2019-09-02_22-41-10.exe
    .exe windows x86


  • 31.exe
    .exe windows x86


  • 3DMark 11 Advanced Edition.exe
    .exe windows x86


  • Archive.zip__ccacaxs2tbz2t6ob3e.exe
    .exe windows x86


  • CVE-2018-15982_PoC.swf
  • CVWSHSetup[1].bin/WSHSetup[1].exe
    .exe windows x86


  • DiskInternals_Uneraser_v5_keygen.exe
    .exe windows x86


  • ForceOp 2.8.7 - By RaiSence.exe
    .exe windows x86


  • HYDRA.exe
    .exe windows x86


  • Keygen.exe
    .exe windows x86


  • Lonelyscreen.1.2.9.keygen.by.Paradox/FILE_ID.DIZ
  • Lonelyscreen.1.2.9.keygen.by.Paradox/Lonelyscreen.1.2.9.keygen.by.Paradox.exe
    .exe windows x86


  • Lonelyscreen.1.2.9.keygen.by.Paradox/Paradox.nfo
  • LtHv0O2KZDK4M637.exe
    .exe windows x86


  • OnlineInstaller.exe
    .exe windows x86


    Exports

  • Remouse.Micro.Micro.v3.5.3.serial.maker.by.aaocg.exe
    .exe windows x86


  • Treasure.Vault.3D.Screensaver.keygen.by.Paradox.exe
    .exe windows x86


  • VyprVPN.exe
    .exe windows x86


  • WSHSetup[1].exe
    .exe windows x86


  • api.exe
    .exe windows x86


  • efd97b1038e063779fb32a3ab35adc481679a5c6c8e3f4f69c44987ff08b6ea4.js
    .js
  • good.exe
    .exe windows x86


  • infected dot net installer.exe
    .exe windows x86


  • update.exe
    .exe windows x86


  • vir1.xls
    .xls .xlsm office2007
  • xNet.dll
    .dll windows x86