General

  • Target

    OServerSrv.exe

  • Size

    4.6MB

  • MD5

    1ab51c4940ac93c6bb72a436b7430241

  • SHA1

    c7f18862a75ead7de28f1afc8ef5d62589fcd64d

  • SHA256

    f0bfc546575a950f980262dee518bb987e163687cce8ca494ca440cce9c69a1c

  • SHA512

    7abc21b757c719b9ed8959b3821dc36a7632ee3efb80f92a2737b276e51b4c268453b483b3ceb9d7983231b0cbaab3b3dd7fae9e21fec4f725b041f736719e7e

  • SSDEEP

    98304:6W6ZdNmk/ezmCJ4ar77/4YrJ3DTaNbgfp/HTtRngceKrdPiW4d00hAdfRem1sGn:t0mac440Y1zmN2pbnetZQdJ7uU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • OServerSrv.exe
    .zip

    Password: ow&b!54X6x_#4gT@9BT4

  • Device/HarddiskVolume3/_Install/Uti/Xenia/OServerSrv.exe
    .exe windows x86

    Password: ow&b!54X6x_#4gT@9BT4

    a34c5a20d71d9a9a0afe48a48333d749


    Headers

    Imports

    Sections

  • manifest.json