General

  • Target

    Dead_Legacy.rar

  • Size

    43.6MB

  • MD5

    156f566e0fe13f953abc3c6b159a4482

  • SHA1

    458e405ed965ad335236ee69b7828ed67ca40d8a

  • SHA256

    242e4c5b2371a1f7a22a228051956072a11cff5774f70274b7b605115ffa7776

  • SHA512

    58e9f596cc2d3a5d087bc76a469ec4fb8273decb28f99e3daec1fa3874a45af97927021130403b3b537cfa26371fe9d18b72700724985daaeedee5ba5b377c05

  • SSDEEP

    786432:/bkPFTU/fBx7SKqw1qfWpiy/zYwH1ViWCgiu4kpa9x/yII6tKh7O2JcijjFj7zwY:cFTU/fB3qwIfWpxbPVVfCnu4kG5uO2Jh

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Files

  • Dead_Legacy.rar
    .rar

    Password: AKQW-3NKS-4KCN

  • Dead_Legacy/DeadLegacy.exe
    .exe windows x64

    Password: AKQW-3NKS-4KCN


    Headers

    Exports

    Sections

  • Dead_Legacy/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
    .dll windows x64

    Password: AKQW-3NKS-4KCN

    1737bddb9587b8f0af02882bfe42a1e0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dead_Legacy/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
    .dll windows x64

    Password: AKQW-3NKS-4KCN

    e981eeee78ab7b04860d974620a7c7c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dead_Legacy/MonoBleedingEdge/etc/.vs/ProjectSettings.json
  • Dead_Legacy/MonoBleedingEdge/etc/.vs/VSWorkspaceState.json
  • Dead_Legacy/MonoBleedingEdge/etc/.vs/etc/FileContentIndex/5c3d578f-1357-431e-8595-f5aa6f7a0347.vsidx
  • Dead_Legacy/MonoBleedingEdge/etc/.vs/etc/v17/.wsuo
  • Dead_Legacy/MonoBleedingEdge/etc/.vs/slnx.sqlite
  • Dead_Legacy/MonoBleedingEdge/etc/mono/2.0/Browsers/Compat.browser
  • Dead_Legacy/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
    .js
  • Dead_Legacy/MonoBleedingEdge/etc/mono/2.0/machine.config
    .xml
  • Dead_Legacy/MonoBleedingEdge/etc/mono/2.0/settings.map
    .xml
  • Dead_Legacy/MonoBleedingEdge/etc/mono/2.0/web.config
    .xml
  • Dead_Legacy/MonoBleedingEdge/etc/mono/4.0/Browsers/Compat.browser
  • Dead_Legacy/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
    .js
  • Dead_Legacy/MonoBleedingEdge/etc/mono/4.0/machine.config
    .xml
  • Dead_Legacy/MonoBleedingEdge/etc/mono/4.0/settings.map
    .xml
  • Dead_Legacy/MonoBleedingEdge/etc/mono/4.0/web.config
    .xml
  • Dead_Legacy/MonoBleedingEdge/etc/mono/4.5/Browsers/Compat.browser
  • Dead_Legacy/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
    .js
  • Dead_Legacy/MonoBleedingEdge/etc/mono/4.5/machine.config
    .xml
  • Dead_Legacy/MonoBleedingEdge/etc/mono/4.5/settings.map
    .xml
  • Dead_Legacy/MonoBleedingEdge/etc/mono/4.5/web.config
    .xml
  • Dead_Legacy/MonoBleedingEdge/etc/mono/browscap.ini
  • Dead_Legacy/MonoBleedingEdge/etc/mono/config
  • Dead_Legacy/MonoBleedingEdge/etc/mono/mconfig/config.xml
    .xml
  • Dead_Legacy/UnityCrashHandler64.exe
    .exe windows x64

    Password: AKQW-3NKS-4KCN

    5c64b8e3c52925909413e148f250e94c


    Code Sign

    Headers

    Imports

    Sections

  • Dead_Legacy/UnityPlayer.dll
    .dll windows x64

    Password: AKQW-3NKS-4KCN

    321d9c9a4d2018622f1a6dad0b44e04e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dead_Legacy/data.win
  • Dead_Legacy/information.txt
  • Dead_Legacy/options.ini