Overview

overview

10

Static

static

10

g-spotv2.0...or.exe

windows7-x64

10

g-spotv2.0...or.exe

windows10-2004-x64

10

g-spotv2.0/Server.exe

windows7-x64

10

g-spotv2.0/Server.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    g-spotv2.0.rar

  • Size

    439KB

  • MD5

    99013df00a00db8377a37edf96f43710

  • SHA1

    47d2d00004c1d49e1113aed64f5620a0b51b4fe5

  • SHA256

    3982489729810f78fd8221423c063cd2d0eed2ca943db44888d1f751b6157837

  • SHA512

    1cf5a0a6321c3999fb729fe986d41d412fb8db9b48b345b6560bb0f47d369460f37630fef321b42596b5ea2ce3841bb4806a4adfde20d013924d7cedbc0d5564

  • SSDEEP

    12288:twQqf9YKpDckjEWxFIuZc9N5EM/1DB3hwqfd+YK8:tsfNcTW/ncOO8rt8

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • g-spotv2.0.rar
    .rar

    Password: infected

  • g-spotv2.0/G-Spot Bot Editor.exe
    .exe windows x86


    Headers

    Sections

  • g-spotv2.0/README.txt
  • g-spotv2.0/Server.dll
    .exe windows x86

    Password: infected


    Headers

    Sections