General

  • Target

    korse_snipr.zip

  • Size

    13.3MB

  • MD5

    a35f929abca5ba6aa1208c1d253d8e0e

  • SHA1

    db6845b6711639a2aaf536d3a50828d5deb57e53

  • SHA256

    e72a728ff196ee5e513efd2a7d349cf1d431457603ecf12253fae912a729c75a

  • SHA512

    eea81255be791ae5ba2e6aa19237ff1940ec1d460cf3f54e8a54205d502cb2cb460e5cbb54e5531aa16ebb568831d2dceb58357af41e936afecc8eff19cfbc40

  • SSDEEP

    393216:hDPH+UwjGgHiIKdtx0vWS22CJyz8Gj0W9EuO:dHTaGmiavXhC4z8RW2

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • korse_snipr.zip
    .zip

    Password: korsesnipaw1

  • korse snipr/CHANGES.txt
  • korse snipr/MSVCP140.dll
    .dll windows x64

    Password: korsesnipaw1

    2d14223d6f13e6499c10a49c1d5a1075


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/VCRUNTIME140.dll
    .dll windows x64

    Password: korsesnipaw1

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/VCRUNTIME140_1.dll
    .dll windows x64

    Password: korsesnipaw1

    f241ab269df0f49a166138f5cc16a017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/_asyncio.pyd
    .dll windows x64

    Password: korsesnipaw1

    9d434eba59ce931bdee5b38eec4b196b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/_bz2.pyd
    .dll windows x64

    Password: korsesnipaw1

    d0a62ab71a2b2ca69c6aba1f0a37fcdd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/_ctypes.pyd
    .dll windows x64

    Password: korsesnipaw1

    e716aa549ea6dfb7b233942c7f07ff87


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/_curses.cp311-win_amd64.pyd
    .dll windows x64

    Password: korsesnipaw1

    ab40f94fe2e047bb01cbcb1b9df96a07


    Headers

    Imports

    Exports

    Sections

  • korse snipr/_decimal.pyd
    .dll windows x64

    Password: korsesnipaw1

    73c2b50451f272a440f47564c3cbd631


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/_hashlib.pyd
    .dll windows x64

    b3b294bbb4a8941fd67b11ccbe0be65b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/_lzma.pyd
    .dll windows x64

    c39c7a021b2adfc11bb34f105f70355e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/_multiprocessing.pyd
    .dll windows x64

    ad5e2bc3f4742dadfaf9e74afc91a9f0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/_overlapped.pyd
    .dll windows x64

    48664681fdde7330197ca0b81cd0888e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/_queue.pyd
    .dll windows x64

    d39104d594ed5774205f94197c63bfbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/_socket.pyd
    .dll .js windows x64
  • korse snipr/_ssl.pyd
    .dll windows x64

    ba77dcd459076e05d402c6e9b4f52171


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/_uuid.pyd
    .dll windows x64

    368b62645c11988f8173cf8bdd0fea25


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/aiohttp/_helpers.cp311-win_amd64.pyd
    .dll windows x64

    67f66815894b822eac51b7b897c090bc


    Headers

    Imports

    Exports

    Sections

  • korse snipr/aiohttp/_http_parser.cp311-win_amd64.pyd
    .dll windows x64

    54e2c730eded6bf4db09704a57c251af


    Headers

    Imports

    Exports

    Sections

  • korse snipr/aiohttp/_http_writer.cp311-win_amd64.pyd
    .dll windows x64

    5a1c967a19dd7499f6965102e21bc27c


    Headers

    Imports

    Exports

    Sections

  • korse snipr/aiohttp/_websocket.cp311-win_amd64.pyd
    .dll windows x64

    a01af2f36e74fc2980416c0cd208b48a


    Headers

    Imports

    Exports

    Sections

  • korse snipr/attrs-23.1.0.dist-info/INSTALLER
  • korse snipr/attrs-23.1.0.dist-info/METADATA
  • korse snipr/attrs-23.1.0.dist-info/RECORD
  • korse snipr/attrs-23.1.0.dist-info/WHEEL
  • korse snipr/attrs-23.1.0.dist-info/licenses/LICENSE
  • korse snipr/base_library.zip
    .zip
  • korse snipr/certifi/cacert.pem
  • korse snipr/config.json
  • korse snipr/cookies.txt
  • korse snipr/extensions/base/__init__.py
  • korse snipr/extensions/base/__pycache__/__init__.cpython-311.pyc
  • korse snipr/extensions/base/__pycache__/bot.cpython-311.pyc
  • korse snipr/extensions/base/__pycache__/events.cpython-311.pyc
  • korse snipr/extensions/base/bot.py
  • korse snipr/extensions/base/events.py
  • korse snipr/extensions/required/trustedExtensions.hash
  • korse snipr/frozenlist/_frozenlist.cp311-win_amd64.pyd
    .dll windows x64

    cfbbd88f4fc1e632b4cc3036adaba624


    Headers

    Imports

    Exports

    Sections

  • korse snipr/korse snipr.exe
    .exe windows x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • korse snipr/libcrypto-1_1.dll
    .dll windows x64

    11f2ed72076bbf7871eb95fd5b4e84b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/libffi-8.dll
    .dll windows x64

    3dc8b86d60f90a1851eee5f9dc191312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/libssl-1_1.dll
    .dll windows x64

    3adf02a15243fccc51beb2b37fbf071d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/limiteds.txt
  • korse snipr/markupsafe/_speedups.cp311-win_amd64.pyd
    .dll windows x64

    0784085916c71ada4a57297042e38332


    Headers

    Imports

    Exports

    Sections

  • korse snipr/multidict/_multidict.cp311-win_amd64.pyd
    .dll windows x64

    1f1d6572a871e8a013b796e8365b088c


    Headers

    Imports

    Exports

    Sections

  • korse snipr/proxies.txt
  • korse snipr/pyexpat.pyd
    .dll windows x64

    cfa32f0abc6ae85c4b2078212640c054


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/python311.dll
    .dll windows x64

    5714829f48aacde8f83e3e5f0ead1f49


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/quart-0.17.0.dist-info/INSTALLER
  • korse snipr/quart-0.17.0.dist-info/LICENSE
  • korse snipr/quart-0.17.0.dist-info/METADATA
  • korse snipr/quart-0.17.0.dist-info/RECORD
  • korse snipr/quart-0.17.0.dist-info/WHEEL
  • korse snipr/quart-0.17.0.dist-info/entry_points.txt
  • korse snipr/rapidjson.cp311-win_amd64.pyd
    .dll windows x64

    1e6a67f3eae93cd00ee9f79b36d3f142


    Headers

    Imports

    Exports

    Sections

  • korse snipr/requirements.txt
  • korse snipr/select.pyd
    .dll windows x64

    fc4f7d736924aa67a1bd7b7b80894df9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/themes/baseTheme/config.json
  • korse snipr/themes/baseTheme/logo.txt
  • korse snipr/themes/baseTheme/phenom.txt
  • korse snipr/themes/baseTheme/printText.txt
  • korse snipr/themes/baseTheme/theme.py
  • korse snipr/themes/baseTheme/thunder.txt
  • korse snipr/themes/required/__pycache__/sniper.cpython-311.pyc
  • korse snipr/themes/required/__pycache__/visual.cpython-311.pyc
  • korse snipr/themes/required/required.json
  • korse snipr/themes/required/sniper.py
  • korse snipr/themes/required/visual.py
  • korse snipr/unicodedata.pyd
    .dll windows x64

    bb6f6d951dbdd290ecf382ca57459172


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • korse snipr/yarl/_quoting_c.cp311-win_amd64.pyd
    .dll windows x64

    c8aad050a232d2f0641684b8c4d0c78a


    Headers

    Imports

    Exports

    Sections