General

  • Target

    AppSetup.zip

  • Size

    213.4MB

  • MD5

    8f67116a7162f6cc4fcb136801b7cd79

  • SHA1

    15379613f6fc9783cea5019ad1825c8b9cfe600d

  • SHA256

    ceca5640d01a16a5ebb28c1026192ad51eb87dc3e7a83665c656654dd581caf7

  • SHA512

    b912cb2a6837fe21c8ac503747225eb90cbd82d0cc346d748975a0c7fb2ee603ee708d4744a8cd5a13ab5dda6e3e1de814cd31da11205bc1cbf729ecc34c75e8

  • SSDEEP

    3145728:L5l3mKy35sc/NiZWgIhCBPpNV11j/elN89uCzDytg9Scu6/G0P92jrMLArN:L5l3mLpsqgN9Qw9uQ0pU23MON

Score
10/10

Malware Config

Extracted

Family

aurora

C2

82.115.223.138:8081

Signatures

  • Aurora family
  • Shurk Stealer payload 1 IoCs
  • Shurk family

Files

  • AppSetup.zip
    .zip
  • Installer.exe
    .exe windows x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections

  • Other/20220516_1018214091.2986090+03_00].zip
    .zip
  • Other/20220516_1097694580.7875215+03_00].zip
    .zip
  • Other/20220516_112006540.7610463+03_00].zip
    .zip
  • Other/20220516_1184192192.2734422+03_00].zip
    .zip
  • Other/20220516_1185256935.6687788+03_00].zip
    .zip
  • Other/20220516_1295583759.8043085+03_00].zip
    .zip
  • Other/20220516_1303553460.1925456+03_00].zip
    .zip
  • Other/20220516_1316982435.8212973+03_00].zip
    .zip
  • Other/20220516_131716490.5716524+03_00].zip
    .zip .ps1
  • Other/20220516_1370206035.4936219+03_00].zip
    .zip
  • Other/20220516_1468963126.6250410+03_00].zip
    .zip
  • Other/20220516_1481673312.8915272+03_00].zip
    .zip
  • Other/20220516_1553460582.9325061+03_00].zip
    .zip
  • Other/20220516_1608825615.1515510+03_00].zip
    .zip
  • Other/20220516_1613768224.7847083+03_00].zip
    .zip
  • Other/20220516_1649461066.2817575+03_00].zip
    .zip
  • Other/20220516_1681983085.2207866+03_00].zip
    .zip
  • Other/20220516_1720286505.0412867+03_00].zip
    .zip
  • Other/20220516_1730639324.0433177+03_00].zip
    .zip
  • Other/20220516_1849029246.2548012+03_00].zip
    .zip
  • Other/20220516_1875014187.2175541+03_00].zip
    .zip
  • Other/20220516_1875659433.8370593+03_00].zip
    .zip
  • Other/20220516_1889714206.6489357+03_00].zip
    .zip
  • Other/20220516_1974287711.8724024+03_00].zip
    .zip
  • Other/20220516_2102710970.5589112+03_00].zip
    .zip
  • Other/20220516_2140815700.2246538+03_00].zip
    .zip
  • Other/20220516_220779441.2937945+03_00].zip
    .zip
  • Other/20220516_240239117.1910205+03_00].zip
    .zip
  • Other/20220516_281498584.2284041+03_00].zip
    .zip
  • Other/20220516_336360775.5193600+03_00].zip
    .zip
  • Other/20220516_370491162.9901740+03_00].zip
    .zip
  • Other/20220516_529143345.0206179+03_00].zip
    .zip
  • Other/20220516_634994583.5468434+03_00].zip
    .zip
  • Other/20220516_743574335.8470224+03_00].zip
    .zip
  • Other/20220516_857591939.4829685+03_00].zip
    .zip
  • Other/20220516_861481624.3683394+03_00].zip
    .zip
  • Other/20220516_972926196.0993477+03_00].zip
    .zip
  • Other/AU[75EC56860B982799FFF7768C10414984] [2022-03-28T08_39_00.15 (2).zip
    .zip
  • Other/AU[75EC56860B982799FFF7768C10414984] [2022-03-28T08_39_00.15.zip
    .zip
  • Other/AllFound (10).rar
    .rar
  • Other/AllFound (11).rar
    .rar
  • Other/AllFound (12).rar
    .rar
  • Other/AllFound (13).rar
    .rar
  • Other/AllFound (14).rar
    .rar
  • Other/AllFound (2) (2).rar
    .rar
  • Other/AllFound (2).rar
    .rar
  • Other/AllFound (3).rar
    .rar
  • Other/AllFound (4).rar
    .rar
  • Other/AllFound (5).rar
    .rar
  • Other/AllFound (6).rar
    .rar
  • Other/AllFound (7).rar
    .rar
  • Other/AllFound (8).rar
    .rar
  • Other/AllFound (9).rar
    .rar
  • Other/AllFound.rar
    .rar
  • Other/BD[D88B64E653FC0E42D0955F8AAE0B1C5F] [2022-03-28T14_35_05.71.zip
    .zip
  • Other/BE[9DF978946DAC7ED7881513F9D82A133D] [2022-03-29T11_13_42.22 (2).zip
    .zip
  • Other/BE[9DF978946DAC7ED7881513F9D82A133D] [2022-03-29T11_13_42.22.zip
    .zip
  • Other/BR5D70759C25E42B82C74E17507DDFE7FD_2022_11_22T06_46_00_433804.zip
    .zip
  • Other/CA[9A9438B37BA1FF3442E26EA4E99B6910] [2022-03-29T03_40_40.20.zip
    .zip
  • Other/CL61A4571832ED6928980265D73E4D699B_2022_11_22T04_19_51_555924.zip
    .zip
  • Other/CO[B402FA55C90B79B8AB8CBB293D7BF2E1] [2022-03-27T18_11_24.58.zip
    .zip
  • Other/DialogConfig.vdf
  • Other/DialogConfigOverlay_1366x768.vdf
  • Other/DialogConfigOverlay_1904x1042.vdf
  • Other/DialogConfigOverlay_1914x1052.vdf
  • Other/DialogConfigOverlay_1920x1080.vdf
  • Other/IN[181EF75E6D973916FD6F47A9FC641B35] [2022-03-23T14_11_17.62.zip
    .zip
  • Other/IN[546CFF5BC6211C1CB4A58CA022FC4ADD] [2022-03-29T17_22_41.61.zip
    .zip
  • Other/IN[5D10735BF50C8F8FE0473E07A9C8753E] [2022-03-24T04_47_42.13.zip
    .zip
  • Other/IN[634E8BBB60C50A146907374C99B955AC] [2022-03-24T16_45_04.07.zip
    .zip
  • Other/IN[85D1B711CD796BA32E9C081A22B9BD5E] [2022-03-26T11_45_35.25.zip
    .zip
  • Other/IN[90FC78B75A32362142406E9D887DD3D8] [2022-03-29T04_40_44.77.zip
    .zip
  • Other/IN[9AD65EA921D71E42C3B20C6362FE9760] [2022-03-25T04_01_53.39.zip
    .zip
  • Other/IT[A65DF7C261CFE5B4573E6342AC1A9C33] [2022-03-28T16_36_26.92.zip
    .zip
  • Other/KE[4F7EB4282A5ECD6365549791259C8E5A] [2022-03-31T09_06_44.02.zip
    .zip
  • Other/KRF667D2447302F1969B6DE7D92E8F0432_2022_11_22T01_57_16_732342.zip
    .zip
  • Other/LKZGiOkBn.zip
    .zip
  • Other/LK[FE6A87C06232F56CC1D5D8A030A84A06] [2022-03-27T05_02_03.48.zip
    .zip
  • Other/TH17CC54195584377A5FC3CE0D9DA0D51D_2022_11_20T19_29_57_791204.zip
    .zip
  • Other/TN0314DDEE3702FB8D37431B1280A24F79_2022_09_08T21_34_13_612313.zip
    .zip
  • Other/TN[80BAB2BB28146EFB6C330B774B815EC9] [2022-03-24T12_42_17.21.zip
    .zip
  • Other/TR[E1B021618E8D901E33B27032D1DCEC4C] [2022-03-24T10_09_41.00.zip
    .zip
  • Other/TT[7137978138CBF53A0550EF5BF34936D5] [2022-03-26T15_31_44.90.zip
    .zip
  • Other/US5176B1105DD92F54EB2EA7D5A7B9C7AA_2022_12_08T06_59_43_860089.zip
    .zip
  • Other/US5B5337FD160AE64C0ED4E312D1C9BB9D_2022_05_10T14_53_34_636454.zip
    .zip
  • Other/accts.epicgames.com (10).rar
    .rar
  • Other/accts.epicgames.com (11).rar
    .rar
  • Other/accts.epicgames.com (12).rar
    .rar
  • Other/accts.epicgames.com (13).rar
    .rar
  • Other/accts.epicgames.com (14).rar
    .rar
  • Other/accts.epicgames.com (15).rar
    .rar
  • Other/accts.epicgames.com (16).rar
    .rar
  • Other/accts.epicgames.com (17).rar
    .rar
  • Other/accts.epicgames.com (18).rar
    .rar
  • Other/accts.epicgames.com (19).rar
    .rar
  • Other/accts.epicgames.com (2).rar
    .rar
  • Other/accts.epicgames.com (20).rar
    .rar
  • Other/accts.epicgames.com (21).rar
    .rar
  • Other/accts.epicgames.com (22).rar
    .rar
  • Other/accts.epicgames.com (23).rar
    .rar
  • Other/accts.epicgames.com (24).rar
    .rar
  • Other/accts.epicgames.com (25).rar
    .rar
  • Other/accts.epicgames.com (26).rar
    .rar
  • Other/accts.epicgames.com (27).rar
    .rar
  • Other/accts.epicgames.com (28).rar
    .rar
  • Other/accts.epicgames.com (29).rar
    .rar
  • Other/accts.epicgames.com (3).rar
    .rar
  • Other/accts.epicgames.com (30).rar
    .rar
  • Other/accts.epicgames.com (31).rar
    .rar
  • Other/accts.epicgames.com (32).rar
    .rar .ps1
  • Other/accts.epicgames.com (33).rar
    .rar
  • Other/accts.epicgames.com (34).rar
    .rar
  • Other/accts.epicgames.com (35).rar
    .rar
  • Other/accts.epicgames.com (36).rar
    .rar
  • Other/accts.epicgames.com (37).rar
    .rar
  • Other/accts.epicgames.com (38).rar
    .rar
  • Other/accts.epicgames.com (39).rar
    .rar
  • Other/accts.epicgames.com (4).rar
    .rar .ps1
  • Other/accts.epicgames.com (40).rar
    .rar
  • Other/accts.epicgames.com (41).rar
    .rar
  • Other/accts.epicgames.com (5).rar
    .rar
  • Other/accts.epicgames.com (6).rar
    .rar
  • Other/accts.epicgames.com (7).rar
    .rar
  • Other/accts.epicgames.com (8).rar
    .rar
  • Other/accts.epicgames.com (9).rar
    .rar
  • Other/accts.epicgames.com.rar
    .rar
  • Other/bedolaga.7z
    .7z
  • Other/bulkfilechanger.zip
    .zip
  • Other/c4f9961709364511ba81_CefiroNiss.zip
    .zip
  • Other/config.vdf
  • Other/cookie.rar
    .rar
  • Other/cookies (2).rar
    .rar
  • Other/cookies.rar
    .rar
  • Other/lgsCoc.rar
    .rar
  • Other/libraryfolders.vdf
  • Other/loginusers.vdf
  • Other/ssfn39947896640320239
  • Other/ssfn6696008229845428108
  • api64lib.cdx
  • api64lib.dll
  • dbghelp.dll
  • licenses.json
  • v8.dll