Resubmissions

18/05/2023, 17:35

230518-v53kjadb84 7

18/05/2023, 17:27

230518-v1fj7sca8v 7

General

  • Target

    Ctfmonduo_loader.zip

  • Size

    12.5MB

  • MD5

    0e1546334a0e1dce4e5d9cd21bd7fadc

  • SHA1

    ae9115cab36b26573c69d33652c7d966814a3add

  • SHA256

    ceb5844d890809be4c26d4521cbe3c659da0ed3694b0ba6bdd4aeb50560a1450

  • SHA512

    458d9f758a6b268fff93b15fa0812d781c767fb3b535fa134fa781a9d2cbce899e0c2bb4f5b8d6b4f9f620f3c8deacc3e1ca16a8489824e4a21bbd4636ea28d7

  • SSDEEP

    196608:LSYa2C7VMLUkCzp7f5M1XKaz4+WUqZQARl5FBbhfESgvmsmTmnNWwEY2R7rq7I:LJad7IvchUqZ/l5h7gvmvTmnNxF29rh

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Ctfmonduo_loader.zip
    .zip
  • CtfmonDuo.dll
    .dll windows x86

    526a005ae2a3943b3c9abec0dccb8909


    Headers

    Imports

    Exports

    Sections

  • load.exe
    .exe windows x86

    6515c5f37f49bb18c60d22d9ca71195c


    Headers

    Imports

    Sections