Overview

overview

3

Static

static

3

shadowbot/...st.exe

windows7-x64

1

shadowbot/...st.exe

windows10-2004-x64

1

shadowbot/...L.html

windows7-x64

1

shadowbot/...L.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    shadowbot.rar

  • Size

    113KB

  • MD5

    dc626ec6e103da5aa5e34c9209b93096

  • SHA1

    b9529ba7901324aed115a1e34b606bab4a67bd91

  • SHA256

    c8ecc49a711b14725ef78feb13cea08a539c50e45f41e25d4a330292606e7ea9

  • SHA512

    2fe4cec0b4dba283d7b04924cc4b8fb94a13621a4f04899b4df5b35dedceed1ba393da9f2d3ff6e23f2d5f0c334ecd56aadd1588f26594c76bf12c22dade4dce

  • SSDEEP

    3072:2Wr1nRz10UT30XnHWN7pPGKu1U4D7cX9H02Q0ipwo:2YNxmnHWN7AKuRDYo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • shadowbot.rar
    .rar

    Password: infected

  • shadowbot/shadow/Debug/pstorec.tlh
  • shadowbot/shadow/Debug/pstorec.tli
  • shadowbot/shadow/MD5ChecksumTest.exe
    .exe windows x86

    Password: infected

    45d8cb55bcfec04939099fc1affdfcce


    Headers

    Imports

    Sections

  • shadowbot/shadow/Psapi.Lib
  • shadowbot/shadow/Psapi.h
  • shadowbot/shadow/ShadowBot.dsw
  • shadowbot/shadow/ShadowBot.ncb
  • shadowbot/shadow/ShadowBot.opt
  • shadowbot/shadow/ShadowBotDLL.cpp
  • shadowbot/shadow/ShadowBotDLL.dsp
  • shadowbot/shadow/ShadowBotDLL.dsw
  • shadowbot/shadow/ShadowBotDLL.ncb
  • shadowbot/shadow/ShadowBotDLL.opt
  • shadowbot/shadow/ShadowBotDLL.plg
    .html
  • shadowbot/shadow/extern.h
  • shadowbot/shadow/inc.h
  • shadowbot/shadow/md5.cpp
  • shadowbot/shadow/md5.h
  • shadowbot/shadow/pstore.cpp
  • shadowbot/shadow/pstorec.tlh
  • shadowbot/shadow/pstorec.tli
  • shadowbot/shadow/skysyn.cpp
  • shadowbot/shadow/windns.h