Resubmissions

12-11-2021 18:04

211112-wnzb8aahhm 10

19-11-2020 10:08

201119-rhwlt38jrx 10

18-11-2020 17:26

201118-htd4fq29va 10

General

  • Target

    Downloads.rar

  • Size

    139.9MB

  • MD5

    24cd2246d5a28f79a7e95a74c7d282c6

  • SHA1

    6d4953d61b602667475e28d4f8eb2aae166cfcd4

  • SHA256

    390d7472201e8ea9bdc6c7fa2b4ab1f6faca02071f1f997037cc5f52759a9cb6

  • SHA512

    95983ce807050d66d89630c0ff40545891c1ba2a317e94fca6a2b263057bbc1dfceea7ec4a7764dcaae83921eb5607c28be42e416f736b9bcec27ef89e00a8fe

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • NSIS installer 4 IoCs

Files

  • Downloads.rar
    .rar
  • 1.bin/1.exe
    .exe windows x86


  • 2019-09-02_22-41-10.exe
    .exe windows x86


  • 31.exe
    .exe windows x86


  • 3DMark 11 Advanced Edition.exe
    .exe windows x86


  • 5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18
    .exe windows x86


  • Archive.zip__ccacaxs2tbz2t6ob3e.exe
    .exe windows x86


  • CVE-2018-15982_PoC.swf
  • CVWSHSetup[1].bin/WSHSetup[1].exe
    .exe windows x86


  • DiskInternals_Uneraser_v5_keygen.exe
    .exe windows x86


  • ForceOp 2.8.7 - By RaiSence.exe
    .exe windows x86


  • HYDRA.exe
    .exe windows x86


  • Keygen.exe
    .exe windows x86


  • Lonelyscreen.1.2.9.keygen.by.Paradox/FILE_ID.DIZ
  • Lonelyscreen.1.2.9.keygen.by.Paradox/Lonelyscreen.1.2.9.keygen.by.Paradox.exe
    .exe windows x86


  • Lonelyscreen.1.2.9.keygen.by.Paradox/Paradox.nfo
  • LtHv0O2KZDK4M637.exe
    .exe windows x86


  • Magic_File_v3_keygen_by_KeygenNinja.exe
    .exe windows x86


  • OnlineInstaller.exe
    .exe windows x86


    Exports

  • Remouse.Micro.Micro.v3.5.3.serial.maker.by.aaocg.exe
    .exe windows x86


  • SecurityTaskManager_Setup.exe
    .exe windows x86


  • Treasure.Vault.3D.Screensaver.keygen.by.Paradox.exe
    .exe windows x86


  • VyprVPN.exe
    .exe windows x86


  • WSHSetup[1].exe
    .exe windows x86


  • ___ _ _____ __ ___/전산 및 비전산자료 보존 요청서.tgz
    .gz
  • 전산 및 비전산자료 보존 요청서.tgz
    .tar
  • ___ _ _____ __ ___/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서(20200525)_꼭 확인하시고 자료보존해주세요.exe
    .exe windows x86


    Exports

  • ___ _ _____ __ ___/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서(20200525)_꼭 확인하시고 자료보존해주세요1.exe
    .exe windows x86


    Exports

  • amtemu.v0.9.2.win-painter_edited.exe
    .exe windows x86


  • api.exe
    .exe windows x86


  • default.exe
    .exe windows x86


  • efd97b1038e063779fb32a3ab35adc481679a5c6c8e3f4f69c44987ff08b6ea4.js
    .js
  • good.exe
    .exe windows x86


  • infected dot net installer.exe
    .exe windows x86


  • oof.exe
    .exe windows x86


  • ou55sg33s_1.exe
    .exe windows x86


  • update.exe
    .exe windows x86


  • vir1.xls
    .xls .xlsm office2007
  • xNet.dll
    .dll windows x86