General

  • Target

    all.zip

  • Size

    36.2MB

  • MD5

    7c2aa852211b49b68f38ebb9971915b4

  • SHA1

    adcea03a835a323f8864706610adfefd16895d80

  • SHA256

    91cd8bfbe714acc43beff32856c3d56ded48706d3c92c492a1acb994b606003b

  • SHA512

    22a9baf252145f405741c639019cc56f0a5ab4a836b2b6077bf196e80e83089dbb49dff8414b79b8fd182aa79f0ed27611906c5c4a8bcbb43aee607c0ae8eb27

  • SSDEEP

    786432:waRfSFdwzJBmpuPu/mD2h0bbWU06mgk+25yMj4FUx0I1NuDIm8+nomsmkQWCE:waRfSFdwz+uPu/N2x1mgGUoGUOIzu8m6

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Themida packer 4 IoCs

    Detects Themida, an advanced Windows software protection system.

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

Files

  • all.zip
    .zip
  • all/README.txt
  • all/clickers/Spotify.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • all/clickers/axentav2.exe
    .exe windows x64


    Code Sign

    Headers

    Sections

  • all/clickers/isolation.exe
    .exe windows x86

    4f5deef55182827a8fedb62cb823e9ce


    Code Sign

    Headers

    Imports

    Sections

  • all/clickers/mangoclicker.exe
    .exe windows x64


    Code Sign

    Headers

    Sections

  • all/clickers/nigclickermp3.exe
    .exe windows x64


    Code Sign

    Headers

    Sections

  • all/clickers/slinkylmao.exe
    .exe windows x64

    3b7764a1804c8f2ad22122774fc2bb1e


    Code Sign

    Headers

    Imports

    Sections

  • all/clickers/vega.exe
    .exe windows x64

    ccb4fa18bec40c1c0390cc7de45708ba


    Code Sign

    Headers

    Imports

    Sections

  • all/gcs/Client_Loader.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • all/gcs/Icetea.exe
    .exe windows x64

    47d3c83fef3237b69b3ad220edbea196


    Code Sign

    Headers

    Imports

    Sections

  • all/gcs/Koid.exe
    .exe windows x64

    3fd06be36c16623831cd45fd8968adcb


    Code Sign

    Headers

    Imports

    Sections

  • all/gcs/crypt.exe
    .exe windows x64


    Code Sign

    Headers

    Sections

  • all/gcs/encephalon_clean.exe
    .exe windows x64


    Code Sign

    Headers

    Sections

  • all/gcs/epic.exe
    .exe windows x64

    a08599a345be82fd3b030fa5c3b87d5b


    Code Sign

    Headers

    Imports

    Sections

  • all/gcs/itami.exe
    .exe windows x64

    d76f672ed6f495da4bb83044aeaf8537


    Code Sign

    Headers

    Imports

    Sections

  • all/gcs/kryptonclient.exe
    .exe windows x64


    Code Sign

    Headers

    Sections

  • all/gcs/kura.exe
    .exe windows x64


    Code Sign

    Headers

    Sections

  • all/gcs/lithlite.exe
    .exe windows x64

    eba675b4d287f51402a7cf170e487e73


    Code Sign

    Headers

    Imports

    Sections

  • all/gcs/obscure.exe
    .exe windows x64

    c1bfa4f2fb433253319f9886408f907d


    Code Sign

    Headers

    Imports

    Sections

  • all/gcs/old_drip.exe
    .exe windows x64

    00696255f4f88c59d82891fc1a34b7e5


    Code Sign

    Headers

    Imports

    Sections

  • all/gcs/prismhack0.2.exe
    .exe windows x64


    Code Sign

    Headers

    Sections

  • all/gcs/tuke.exe
    .exe windows x64

    50b30da1b43153598da37c3f8b076066


    Code Sign

    Headers

    Imports

    Sections

  • all/gcs/zoomingc.exe
    .exe windows x64

    39b71dbdc35267de98c2852438cb1a94


    Code Sign

    Headers

    Imports

    Sections