General

  • Target

    MultiBit.zip

  • Size

    8.5MB

  • MD5

    83c6487305e3aca80663e3ccf254e05e

  • SHA1

    f95ff2bbd42c5b03c929f72c376e80c49e066b3e

  • SHA256

    40702b0d2a57d292c5bdfbf1ab1db3da71dacc942dc6838b10458f185800d6e5

  • SHA512

    79f6ed94cd0f75ce5ec2c17c9c534b0b7461939fb7a5fe7f9af5bb6fd2135d6d65476f3234f5e01b47e7a408b5c9fce64047a702c0948f38c3125a6a5e6969e3

  • SSDEEP

    196608:GTUol9xlZ+vkEdDVCV5jB6VKQ0rWFNINF4N+L/EVdUwCVUgv6nbZ6RHdAVyRu6F+:GTUiGMIsfwUU+rEVCegubZSHdJRu6Fl4

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 8 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

Files

  • MultiBit.zip
    .zip
  • MultiBit/Bunifu.Licensing.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MultiBit/Bunifu.UI.WinForms.1.5.3.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MultiBit/Bunifu.UI.WinForms.BunifuButton.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MultiBit/Bunifu.UI.WinForms.BunifuImageButton.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MultiBit/Bunifu.UI.WinForms.BunifuPanel.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MultiBit/Bunifu.UI.WinForms.BunifuSeparator.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MultiBit/Bunifu.UI.WinForms.BunifuShadowPanel.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MultiBit/Bunifu.UI.WinForms.BunifuTransition.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MultiBit/Leaf.xNet.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MultiBit/MultiBit.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • MultiBit/Qt5Core.dll
    .dll windows x86

    92fc526ad6d9674f09604104cfa57819


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiBit/_asyncio.pyd
    .dll windows x86

    4b26deddd28c06d2fda0ae84828de8d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiBit/_bz2.pyd
    .dll windows x86

    8ac2267b74475774ddd6ed342b8d5b0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiBit/_cffi_backend.cp39-win32.pyd
    .dll windows x86

    c72b1d4590743dda8e074a978939033d


    Headers

    Imports

    Exports

    Sections

  • MultiBit/_ctypes.pyd
    .dll windows x86

    1b752e570fbca61ed9e4635d240ae2d5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiBit/_decimal.pyd
    .dll windows x86

    366aae0a02c495ffc64f7bd18bc1f4b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiBit/bitbox02/communication/generated/backup_commands_pb2.pyi
  • MultiBit/bitbox02/communication/generated/bitbox02_system_pb2.pyi
  • MultiBit/bitbox02/communication/generated/btc_pb2.pyi
  • MultiBit/bitbox02/communication/generated/common_pb2.pyi
  • MultiBit/bitbox02/communication/generated/eth_pb2.pyi
  • MultiBit/bitbox02/communication/generated/hww_pb2.pyi
  • MultiBit/bitbox02/communication/generated/keystore_pb2.pyi
  • MultiBit/bitbox02/communication/generated/mnemonic_pb2.pyi
  • MultiBit/bitbox02/communication/generated/perform_attestation_pb2.pyi
  • MultiBit/bitbox02/communication/generated/system_pb2.pyi
  • MultiBit/certifi/cacert.pem
  • MultiBit/d3dcompiler_47.dll
    .dll windows x86

    f63cad154afed6da772d0ab361f448f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiBit/libEGL.dll
    .dll windows x86

    9c98d3b5bee3ee0c5c0fdfcb4d295c31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiBit/libeay32.dll
    .dll windows x86

    ef7853af6b3eb20216f3b9caaa5863f3


    Headers

    Imports

    Exports

    Sections

  • MultiBit/mnemonic/py.typed
  • MultiBit/mnemonic/wordlist/chinese_simplified.txt
  • MultiBit/mnemonic/wordlist/chinese_traditional.txt
  • MultiBit/mnemonic/wordlist/english.txt
  • MultiBit/mnemonic/wordlist/french.txt
  • MultiBit/mnemonic/wordlist/italian.txt
  • MultiBit/mnemonic/wordlist/japanese.txt
  • MultiBit/mnemonic/wordlist/korean.txt
  • MultiBit/mnemonic/wordlist/spanish.txt
  • MultiBit/python3.dll
    .dll windows x86


    Code Sign

    Headers

    Exports

    Sections

  • MultiBit/python39.dll
    .dll windows x86

    88e87de6c1cd25baf0c731a778bb1647


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MultiBit/safetlib/tests/txcache/insight_bcash_tx_502e8577b237b0152843a416f8f1ab0c63321b1be7a8cad7bf5c5c216fcf062c.json
  • MultiBit/safetlib/tests/txcache/insight_bcash_tx_8b6db9b8ba24235d86b053ea2ccb484fc32b96f89c3c39f98d86f90db16076a0.json
  • MultiBit/safetlib/tests/txcache/insight_bcash_tx_bc37c28dfb467d2ecb50261387bf752a3977d7e5337915071bb4151e6b711a78.json
  • MultiBit/safetlib/tests/txcache/insight_bcash_tx_f68caf10df12d5b07a34601d88fa6856c6edcbf4d05ebef3486510ae1c293d5f.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_gold_tx_25526bf06c76ad3082bba930cf627cdd5f1b3cd0b9907dd7ff1a07e14addc985.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_gold_tx_db77c2461b840e6edbe7f9280043184a98e020d9795c1b65cb7cef2551a8fb18.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_1570416eb4302cf52979afd5e6909e37d8fdd874301f7cc87e547e509cb1caa6.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_39a29e954977662ab3879c66fb251ef753e0912223a83d1dcb009111d28265e5.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_4a7b7e0403ae5607e473949cfa03f09f2cd8b0f404bf99ce10b7303d86280bf7.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_50f6f1209ca92d7359564be803cb2c932cde7d370f7cee50fd1fad6790f6206d.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_54aa5680dea781f45ebb536e53dffc526d68c0eb5c00547e323b2c32382dfba3.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_58497a7757224d1ff1941488d23087071103e5bf855f4c1c44e5c8d9d82ca46e.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_6189e3febb5a21cee8b725aa1ef04ffce7e609448446d3a8d6f483c634ef5315.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_a6e2829d089cee47e481b1a753a53081b40738cc87e38f1d9b23ab57d9ad4396.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_c6091adf4c0c23982a35899a6e58ae11e703eacd7954f588ed4b9cdefc4dba52.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_c63e24ed820c5851b60c54613fbc4bcb37df6cd49b4c96143e99580a472f79fb.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_c6be22d34946593bcad1d2b013e12f74159e69574ffea21581dad115572e031c.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_d1d08ea63255af4ad16b098e9885a252632086fa6be53301521d05253ce8a73d.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_d5f65ee80147b4bcc70b75e4bbf2d7382021b871bd8867ef8fa525ef50864882.json
  • MultiBit/safetlib/tests/txcache/insight_bitcoin_tx_e4bc1ae5e5007a08f2b3926fe11c66612e8f73c6b00c69c7027213b84d259be3.json
  • MultiBit/safetlib/tests/txcache/insight_decred_testnet_tx_16da185052740d85a630e79c140558215b64e26c500212b90e16b55d13ca06a8.json
  • MultiBit/safetlib/tests/txcache/insight_decred_testnet_tx_3f7c395521d38387e7617565fe17628723ef6635a08537ad9c46cfb1619e4c3f.json
  • MultiBit/safetlib/tests/txcache/insight_decred_testnet_tx_5e6e3500a333c53c02f523db5f1a9b17538a8850b4c2c24ecb9b7ba48059b970.json
  • MultiBit/safetlib/tests/txcache/insight_decred_testnet_tx_ccf95b0fd220ef59ae2e5b17005a81e222758122682d522eff8ae1fcbc93bc74.json
  • MultiBit/safetlib/tests/txcache/insight_decred_testnet_tx_e16248f0b39a0a0c0e53d6f2f84c2a944f0d50e017a82701e8e02e46e979d5ed.json
  • MultiBit/safetlib/tests/txcache/insight_decred_testnet_tx_f395ef3e72a831a766db15e7a38bc28025d4ee02234d68bdea2d8353b47a3113.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_09144602765ce3dd8f4329445b20e3684e948709c5cdcaf12da3bb079c99448a.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_16c6c8471b8db7a628f2b2bb86bfeefae1766463ce8692438c7fd3fce3f43ce5.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_20912f98ea3ed849042efed0fdac8cb4fc301961c5988cba56902d8ffb61c337.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_31bc1c88ce6ae337a6b3057a16d5bad0b561ad1dfc047d0a7fbb8814668f91e5.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_65b811d3eca0fe6915d9f2d77c86c5a7f19bf66b1b1253c2c51cb4ae5f0c017b.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_6f90f3c7cbec2258b0971056ef3fe34128dbde30daa9c0639a898f9977299d54.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_9c31922be756c06d02167656465c8dc83bb553bf386a3f478ae65b5c021002be.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_b0946dc27ba308a749b11afecc2018980af18f79e89ad6b080b58220d856f739.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_c9348040bbc2024e12dcb4a0b4806b0398646b91acf314da028c3f03dd0179fc.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_d2dcdaf547ea7f57a713c607f15e883ddc4a98167ee2c43ed953c53cb5153e24.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_d6da21677d7cca5f42fbc7631d062c9ae918a0254f7c6c22de8e8cb7fd5b8236.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_d80c34ee14143a8bf61125102b7ef594118a3796cad670fa8ee15080ae155318.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_e5040e1bc1ae7667ffb9e5248e90b2fb93cd9150234151ce90e14ab2f5933bcd.json
  • MultiBit/safetlib/tests/txcache/insight_testnet_tx_f41cbedd8becee05a830f418d13aa665125464547db5c7a6cd28f21639fe1228.json
  • MultiBit/usb1/libusb-1.0.dll
    .dll windows x86

    c982b5dd19e7d90ecc86fc2adc271781


    Headers

    Imports

    Exports

    Sections