General

  • Target

    MatSploit.rar

  • Size

    8.8MB

  • MD5

    6d9593c0b6e8cf81b323bb5453736f17

  • SHA1

    74b23a9cf26009b311e1f1b853f9284c5c426f27

  • SHA256

    4f59429fb16674587e462f66c5732b51d211df9bcce758eec5b31046f05a2d60

  • SHA512

    adb0c2bc93c32208b52aec01cd6be5af810389410caf1d81b12a31a699483178f1ddc9f30d37ddc3d93680a872c6e768e556cee8ebb0d706b1504ca310e77f66

  • SSDEEP

    196608:/vecjlVi2vDWmm1PTlbEfT7Pe4Nc7EdPjifLZqEM4PoMxSh0Ih5Y:Hl7WZ1PpCTre4a7EdPWd3QgSDY

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • MatSploit.rar
    .rar
  • BootsTrapperU.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • DiscordRPC.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ICSharpCode.AvalonEdit.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ICSharpCode.AvalonEdit.xml
    .xml
  • MatSploit.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bin/BootstrapperVersion.txt
  • bin/MatSploit.dll
    .dll windows x86

    34c2cea2badec3fa6de333889f4dd3b4


    Headers

    Imports

    Exports

    Sections

  • bin/UIVersion.txt
  • bin/Zeus.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bin/lua.xshd
    .xml
  • bin/rbxfpsunlocker.exe
    .exe windows x64

    8a30acffa5d4e68c6f30f1c14d9a5f09


    Headers

    Imports

    Sections

  • bin/version.txt
  • bin/workspace/286090429.txt
  • librarys/discordrpc.dll
    .dll windows x86

    6310e6aa09f46f952e994ef81548691a


    Headers

    Imports

    Exports

    Sections

  • scripts/LT2.txt
    .js