General

  • Target

    Korepi_0.7.2.zip

  • Size

    27.2MB

  • MD5

    8046fac448fe6f1b8fb548b4ad33a0fe

  • SHA1

    32111c832e942cf4bd79f7c5580353886066db38

  • SHA256

    e4d2a7d2b9620c84b7315b8ccc6a436ba81f61154124aac5cf75117bfdeeef95

  • SHA512

    268c1d268303921acc915d302939962f75dbd8be18022f192b095d6b5f467820c808841dfef47d37e454ff1f5586080490b0ded0d1ccb047c50da2dec444d429

  • SSDEEP

    393216:rLBk0gyAUW5ZttwNGjheA1V9HojmxtkMFErZ7l3dyvyfvJDSd1tTvy04KPR63V64:pKrPwUjhe2WmxjF27ltyvyvBSdNA3V64

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Korepi_0.7.2.zip
    .zip
  • HoYoKProtect.dll
    .dll windows x64


    Headers

    Sections

  • injector.exe
    .exe windows x64

    8c900994ea4628b9ca48009d4162f7b3


    Headers

    Imports

    Sections