General

  • Target

    run.rar

  • Size

    3.8MB

  • MD5

    5cf3ad6e38d25bd0af3da41f1f39c237

  • SHA1

    5b98a749b19ec6138fe6a1c7b3157a05eae20bb5

  • SHA256

    0124590a2db78d570b9c6cfb95c84a1d9e39474422e999edd8bb3e236c3aacf2

  • SHA512

    f01a5578bc6b889f1eb2973f14c2c2317822ed4f1c9f8bb9fea10349bd8edafbac773c38e986b6b96e7d1b969d1705c2767ee7a30a8d80d652561b5d4f794f1d

  • SSDEEP

    98304:MVXvwvq1Nt7KhQUtv7DpmX/FwjJiGRo9SMQquA1T55Ru:iXvwvwoD7dmX/FwcpSMQquA1T/Ru

Score
N/A

Malware Config

Signatures

Files

  • run.rar
    .rar

    Password: 2022

  • run/IF YOU DONT SEE FILE.txt
  • run/bin/CIT.dll
    .dll windows x64

    Password: 2022

    43dbdd043f024bb1b1a5ea07f5ef8ac8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • run/bin/CoolType.dll
    .dll windows x64

    Password: 2022

    5711417ee2ed698467a01b2eac45a441


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • run/bin/cgGL.dll
    .dll windows x64

    Password: 2022

    6395551b9bdc2570368e74ab4b4b07db


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • run/bin/make/language-configuration.json
  • run/bin/make/package.json
  • run/bin/make/package.nls.json
  • run/bin/make/syntaxes/make.tmLanguage.json
    .ps1
  • run/bin/markdown-basics/language-configuration.json
  • run/bin/markdown-basics/package.json
  • run/bin/markdown-basics/package.nls.json
  • run/bin/markdown-basics/snippets/markdown.code-snippets
  • run/bin/markdown-basics/syntaxes/markdown.tmLanguage.json
  • run/bin/markdown-language-features/README.md
  • run/bin/markdown-language-features/dist/extension.js
    .js
  • run/bin/markdown-language-features/dist/extension.js.LICENSE.txt
  • run/bin/markdown-language-features/dist/nls.metadata.header.json
  • run/bin/markdown-language-features/dist/nls.metadata.json
  • run/bin/markdown-language-features/esbuild-notebook.js
    .js
  • run/bin/markdown-language-features/esbuild-preview.js
    .js
  • run/bin/markdown-language-features/icon.png
    .png
  • run/bin/markdown-language-features/media/highlight.css
  • run/bin/markdown-language-features/media/index.js
    .js
  • run/bin/markdown-language-features/media/markdown.css
  • run/bin/markdown-language-features/media/pre.js
    .js
  • run/bin/markdown-language-features/media/preview-dark.svg
  • run/bin/markdown-language-features/media/preview-light.svg
  • run/bin/markdown-language-features/notebook-out/index.js
    .js
  • run/bin/markdown-language-features/package.json
  • run/bin/markdown-language-features/package.nls.json
  • run/bin/markdown-language-features/schemas/package.schema.json
  • run/bin/markdown-math/README.md
  • run/bin/markdown-math/dist/extension.js
    .js
  • run/bin/markdown-math/icon.png
    .png
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_AMS-Regular.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Caligraphic-Bold.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Caligraphic-Regular.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Fraktur-Bold.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Fraktur-Regular.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Main-Bold.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Main-BoldItalic.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Main-Italic.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Main-Regular.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Math-BoldItalic.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Math-Italic.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_SansSerif-Bold.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_SansSerif-Italic.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_SansSerif-Regular.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Script-Regular.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Size1-Regular.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Size2-Regular.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Size3-Regular.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Size4-Regular.woff2
  • run/bin/markdown-math/notebook-out/fonts/KaTeX_Typewriter-Regular.woff2
  • run/bin/markdown-math/notebook-out/katex.js
    .js
  • run/bin/markdown-math/notebook-out/katex.min.css
  • run/bin/markdown-math/package.json
  • run/bin/markdown-math/package.nls.json
  • run/bin/markdown-math/preview-styles/index.css
  • run/bin/markdown-math/syntaxes/md-math-block.tmLanguage.json
  • run/bin/markdown-math/syntaxes/md-math-inline.tmLanguage.json
  • run/bin/markdown-math/syntaxes/md-math.tmLanguage.json
  • run/bin/v8_context_snapshot.bin
  • run/bin/vb/language-configuration.json
  • run/bin/vb/package.json
  • run/bin/vb/package.nls.json
  • run/bin/vb/snippets/vb.code-snippets
  • run/bin/vb/syntaxes/asp-vb-net.tmlanguage.json
  • run/bin/win32/bower.ico
  • run/bin/win32/c.ico
  • run/bin/win32/code_150x150.png
    .png
  • run/bin/win32/code_70x70.png
    .png
  • run/bin/win32/config.ico
  • run/bin/win32/cpp.ico
  • run/bin/win32/csharp.ico
  • run/bin/win32/css.ico
  • run/bin/win32/default.ico
  • run/bin/win32/go.ico
  • run/bin/win32/html.ico
  • run/bin/win32/jade.ico
  • run/bin/win32/java.ico
  • run/bin/win32/javascript.ico
  • run/bin/win32/json.ico
  • run/bin/win32/less.ico
  • run/bin/win32/markdown.ico
  • run/bin/win32/php.ico
  • run/bin/win32/powershell.ico
  • run/bin/win32/python.ico
  • run/bin/win32/react.ico
  • run/bin/win32/ruby.ico
  • run/bin/win32/sass.ico
  • run/bin/win32/shell.ico
  • run/bin/win32/sql.ico
  • run/bin/win32/typescript.ico
  • run/bin/win32/vue.ico
  • run/bin/win32/xml.ico
  • run/bin/win32/yaml.ico
  • run/bin/xml/package.json
  • run/bin/xml/package.nls.json
  • run/bin/xml/syntaxes/xml.tmLanguage.json
  • run/bin/xml/syntaxes/xsl.tmLanguage.json
  • run/bin/xml/xml.language-configuration.json
  • run/bin/xml/xsl.language-configuration.json
  • run/bin/yaml/language-configuration.json
  • run/bin/yaml/package.json
  • run/bin/yaml/package.nls.json
  • run/bin/yaml/syntaxes/yaml.tmLanguage.json
  • run/blackking.cfg
    .html .js
  • run/hlss/Skript183.ahk
  • run/lan.cfg
    .js
  • run/main.cfg
    .js
  • run/run.exe
    .exe windows x64

    Password: 2022


    Headers

    Sections