Resubmissions

18-11-2020 14:18

201118-dj27sn3f52 10

18-11-2020 13:42

201118-1arz86e7w6 10

18-11-2020 13:38

201118-n8jh228ctn 10

General

  • Target

    Downloads.rar

  • Size

    125.6MB

  • MD5

    4f662505b8b99848b4a76d8370f54b85

  • SHA1

    855c7461bbc84a54a30ec63be4b8343fca64b20b

  • SHA256

    a2d3d6430f6775951cf988d960cfae4093d7a1e4d0f684ddfffaf4599ace9a71

  • SHA512

    1a5310b7c0b4a946c3f00b09eb2a822b4d0261dce0939b645ac494b32e59fe601eb9305a392a6243be840af7b576dcac4386c95213bfa610d93b4a83abe22fc2

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • NSIS installer 6 IoCs

Files

  • Downloads.rar
    .rar
  • 1.bin.zip
    .zip

    Password: infected

  • 1.bin
    .exe windows x86


  • 1.rar
    .rar
  • VPN/VyprVPN.exe
    .exe windows x86


  • VPN/xNet.dll
    .dll windows x86


  • 2019-09-02_22-41-10.bin
    .exe windows x86


  • 31.bin
    .exe windows x86


  • 3DMark 11 Advanced Edition.bin
    .exe windows x86


  • Archive.zip__ccacaxs2tbz2t6ob3e.bin
    .exe windows x86


  • CVE-2018-15982_PoC.swf
  • CVWSHSetup[1].bin.zip
    .zip

    Password: infected

  • WSHSetup[1].bin
    .exe windows x86


  • DiskInternals_Uneraser_v5_keygen.bin
    .exe windows x86


  • ForceOp 2.8.7 - By RaiSence.bin
    .exe windows x86


  • HYDRA.bin
    .exe windows x86


  • Keygen.bin
    .exe windows x86


  • Lonelyscreen.1.2.9.keygen.by.Paradox.zip
    .zip
  • LtHv0O2KZDK4M637.bin
    .exe windows x86


  • OnlineInstaller.bin
    .exe windows x86


    Exports

  • Remouse.Micro.Micro.v3.5.3.serial.maker.by.aaocg.bin
    .exe windows x86


  • Treasure.Vault.3D.Screensaver.keygen.by.Paradox.bin
    .exe windows x86


  • VyprVPN.exe
    .exe windows x86


  • WSHSetup[1].bin
    .exe windows x86


  • api
    .exe windows x86


  • efd97b1038e063779fb32a3ab35adc481679a5c6c8e3f4f69c44987ff08b6ea4.js
    .js
  • good.bin
    .exe windows x86


  • infected dot net installer.bin
    .exe windows x86


  • update.bin
    .exe windows x86


  • vir1.xls
    .xls .xlsm office2007
  • xNet.dll
    .dll windows x86