1668447012[.]zip | Triage™

Resubmissions

04/05/2023, 13:57

230504-q9l15acg77

24/04/2023, 11:36

19/12/2022, 13:56

01/12/2022, 10:10

14/11/2022, 17:31

Sharing

Copy URL Twitter E-mail

General

Target
1668447012.zip
Size 5.7MB
Sample230424-nqscpabe73
SHA256 c9d4250d0847623fdc4f7a704bdec2f002a9a68d2e5d70f69d084cbf2c5259da
MD5 69cc17b05d0161072961c5d939b252c9
SHA1 f1feebaea0b98eab75e5188058b81457c27eaa72
SHA512 6f8fa1ce32e6a676701c6e75e3e02de139985aff6d7d605ba7f58b07ec0256a18c17193831f51f8c81acf58a4730b4afa008c0d67f607aef98f0693528ce3181
SSDEEP 98304:CF3H2yfiG+kFAzw43AmKBmGjWR/wx/hCBZ6BF2lKwN2tbjCZYx7mZlrSMSQJgJuI:wH3qGvFS1Qr5WR/wxU6KQtiZe63WMSZr
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

1668447012.zip

.zip 5.7MB
Reptile_World_Launcher.exe

.exe 729.7MB
libGLESv2.dll

2.9MB

1668447012.zip

SHA256 c9d4250d0847623fdc4f7a704bdec2f002a9a68d2e5d70f69d084cbf2c5259da
MD5 69cc17b05d0161072961c5d939b252c9
SHA1 f1feebaea0b98eab75e5188058b81457c27eaa72
SHA512 6f8fa1ce32e6a676701c6e75e3e02de139985aff6d7d605ba7f58b07ec0256a18c17193831f51f8c81acf58a4730b4afa008c0d67f607aef98f0693528ce3181
SSDEEP 98304:CF3H2yfiG+kFAzw43AmKBmGjWR/wx/hCBZ6BF2lKwN2tbjCZYx7mZlrSMSQJgJuI:wH3qGvFS1Qr5WR/wxU6KQtiZe63WMSZr
MD5 SHA1 SHA512 SSDEEP

Reptile_World_Launcher.exe

IMPHASH ce9aac474333842ed9e111eabd890745
SHA256 2fdb1a2e1eb24d8be2b452170704aa773be1c9dec569d61a1c678ac746fd6ccc
MD5 104040e6e42d6d0e024129b2f1a20cf2
SHA1 f1d31bd67dc827ab176e0fdfa6266ba135a5d03c
SHA512 e12bb66b801c1a37ed8acaf359baeaad79bc5939e08e0448bd03d669d143a200e860db6f37fd289f2f881b90c55b1f7ea65676011f44675b6ad289b07af9cf6a
SSDEEP 98304:onxC2Mt1CDPel44ZmM36vvHU3dSwTOOIlW3AwPUq376ZFAa:0xC2FeBKvs3R8lC+MwF3
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

3423464

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

153KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

679KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hsa0

Size

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.hsa1

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.hsa2

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

196B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

114KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

1668447012.zip

Reptile_World_Launcher.exe

kernel32

libGLESv2.dll