Overview

overview

3

Static

static

3

MD5ChecksumTest.exe

windows7-x64

1

MD5ChecksumTest.exe

windows10-2004-x64

1

aspergillu...st.exe

windows7-x64

1

aspergillu...st.exe

windows10-2004-x64

1

aspergillu...or.exe

windows7-x64

1

aspergillu...or.exe

windows10-2004-x64

1

xor.exe

windows7-x64

1

xor.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    aspergillus_1.3.rar

  • Size

    138KB

  • MD5

    ed9f49a1bb5bf552c34fc5b8d942269b

  • SHA1

    91bd53d454f44a07b7592156f353ab51fdbb94c8

  • SHA256

    9cb9d55d124cb51d7971e93f84acc00bf5dec187bbfd2d8e0e20ef3404b14093

  • SHA512

    d80f24c0fc3f3499e4728e21fa7f0976f73f99b7c544c21dc1482ad603f119c820a2016d887eb9313f67abf39456b804abdec8b3bf64cd10f2dab3755386ddb8

  • SSDEEP

    3072:kFJ3zFzTIpKszo/Wn1ma9huitwlRZKN3aiRQr1n874vIuiIsWrui/rWAvc9:kFJDFa5o+N2KNKcC874PruY/w

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • aspergillus_1.3.rar
    .rar

    Password: infected

  • MD5ChecksumTest.exe
    .exe windows x86

    Password: infected

    45d8cb55bcfec04939099fc1affdfcce


    Headers

    Imports

    Sections

  • aspergillus.dsp
  • aspergillus.dsw
  • aspergillus.txt
  • aspergillus_1.3/MD5ChecksumTest.exe
    .exe windows x86

    Password: infected

    45d8cb55bcfec04939099fc1affdfcce


    Headers

    Imports

    Sections

  • aspergillus_1.3/aspergillus.dsp
  • aspergillus_1.3/aspergillus.dsw
  • aspergillus_1.3/aspergillus.txt
  • aspergillus_1.3/botkiller.cpp
  • aspergillus_1.3/botkiller.h
  • aspergillus_1.3/d3des.c
  • aspergillus_1.3/d3des.h
  • aspergillus_1.3/disclamer.txt
  • aspergillus_1.3/downloader.cpp
  • aspergillus_1.3/irc.cpp
  • aspergillus_1.3/main.cpp
  • aspergillus_1.3/manuals.txt
  • aspergillus_1.3/md5.cpp
  • aspergillus_1.3/md5.h
  • aspergillus_1.3/patcher.cpp
  • aspergillus_1.3/patcher.h
  • aspergillus_1.3/rfb.h
  • aspergillus_1.3/service.cpp
  • aspergillus_1.3/shared.cpp
  • aspergillus_1.3/shared.h
  • aspergillus_1.3/spreader.cpp
  • aspergillus_1.3/strings.cfg
  • aspergillus_1.3/sym.cpp
  • aspergillus_1.3/sym.h
  • aspergillus_1.3/version.c
  • aspergillus_1.3/version.h
  • aspergillus_1.3/vncps.cpp
  • aspergillus_1.3/vncps.h
  • aspergillus_1.3/xor.exe
    .exe windows x86

    Password: infected

    2cce3f96f132b763f87cbf19e39a5455


    Headers

    Imports

    Sections

  • botkiller.cpp
  • botkiller.h
  • d3des.c
  • d3des.h
  • disclamer.txt
  • downloader.cpp
  • irc.cpp
  • main.cpp
  • manuals.txt
  • md5.cpp
  • md5.h
  • patcher.cpp
  • patcher.h
  • rfb.h
  • service.cpp
  • shared.cpp
  • shared.h
  • spreader.cpp
  • strings.cfg
  • sym.cpp
  • sym.h
  • version.c
  • version.h
  • vncps.cpp
  • vncps.h
  • xor.exe
    .exe windows x86

    Password: infected

    2cce3f96f132b763f87cbf19e39a5455


    Headers

    Imports

    Sections