General

  • Target

    RouterPasswordKracker.zip

  • Size

    3.2MB

  • MD5

    e2721acea54b7781946f60055fa6f11a

  • SHA1

    1d621be3631df2f1a3229bc21c6b2137d462e926

  • SHA256

    48d5047475bbb8a5d80522017ce10c8540d583b920466accb00040e8b822ef6f

  • SHA512

    413f5c9a1ee52a79ee561b3adccba37aa2753e48209dae2c3e9bc8915a7fd5562937b3f18316e0259f9e3905366b0aea523f425cccf8829c97899a743c3ed225

  • SSDEEP

    98304:16TCOITrwmCeQA04eYDgcvmyg2H/6Lf5zI:ECOa/QA04eL24zI

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RouterPasswordKracker.zip
    .zip
  • RouterPasswordKracker/Get Enterprise Edition.html
    .html
  • RouterPasswordKracker/Readme.html
    .html
  • RouterPasswordKracker/SecurityXploded_License.pdf
    .pdf
    • http://SecurityXploded.com

    • http://securityxploded.com

  • RouterPasswordKracker/Setup_RouterPasswordKracker.exe
    .exe windows x86

    d6dcfcd3088d6708ed0add18c48ebf98


    Headers

    Imports

    Sections

  • RouterPasswordKracker/passlist.txt
    .vbs