Resubmissions

23-05-2023 12:22

230523-pka2wsfb86 4

23-05-2023 12:17

230523-pgjjvsfb78 4

General

  • Target

    Slinkware.zip

  • Size

    707KB

  • MD5

    c7a6a0976e7f3f7f697ac8ade19aa631

  • SHA1

    cb788963adaf17c02b9a6d6945b3185f13e9d039

  • SHA256

    197763392d7cb107f6ef533f60e476c9183458184b4da1f0d0b5ca1112087c4a

  • SHA512

    ac3a070519b5192cbda4af380ff8afdd0f2f0734be4315e924f5a2d71f5d7282008ddc3db9198e411ec7ae4c845c6342b9e64db881b8e3026fe49b4ac9b843ef

  • SSDEEP

    12288:/BCcm98J949B/V6FkXApvVuAKwMg+HzNYTjHkIR24h/hBndx+OQQRZ:/8cm9LnAHuAMggzmbR2w19Bv

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Slinkware.zip
    .zip
  • Butterfly.toml
  • Paper.pdf
    .pdf
    • https://cloudcheats.net

  • Slinkware.exe
    .exe windows x64

    2ace000a075a1b6f8910a58ec1801d35


    Headers

    Imports

    Sections

  • Slinkware.toml