General

  • Target

    leading.7z

  • Size

    71.0MB

  • MD5

    d0200d5121aeee62b2c10b2dbb12d2df

  • SHA1

    7d1013f2756e27e710a698e25e2f1daba46bd418

  • SHA256

    ec27626fe895f819d7e713e26452947e646e152964f43dfc629aec1b6406c70a

  • SHA512

    d90bdb675c33610c66e87e914d33bdd2c01c3880d5149454f326a167f8e8de0aa610fb92a0e205d0fe79807f4d57a3e736ee0e35e3fee0eb8ed151a29e284434

  • SSDEEP

    1572864:1fKH64k+FBdIxSDo+ERfSvz8syZHwAOCcjcBh7wq4aGnJhdKobOxIU9/:1fKa4kKdIRRK7yZHwAObcv1GJTuxIU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • leading.7z
    .7z

    Password: infected

  • leading/credits.html
  • leading/d3dcompiler_47.dll
    .dll windows x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • leading/ffmpeg.dll
    .dll windows x64

    06b4e41ff9b32ef7e08dc862259879cf


    Headers

    Imports

    Exports

    Sections

  • leading/icudtl.dat
  • leading/init/first_page.html
    .html .js
  • leading/leading.exe
    .exe windows x64

    f6b98e68bc486f7c7d82017e75710224


    Headers

    Imports

    Exports

    Sections

  • leading/libEGL.dll
    .dll windows x64

    455c141d09fae451794635378d43ee08


    Headers

    Imports

    Exports

    Sections

  • leading/libGLESv2.dll
    .dll windows x64

    e3476fd6c0c6b0d11ca659ae22e528cd


    Headers

    Imports

    Exports

    Sections

  • leading/locales/af.pak
  • leading/locales/af.pak.info
  • leading/locales/am.pak
  • leading/locales/am.pak.info
  • leading/locales/ar-XB.pak
  • leading/locales/ar-XB.pak.info
  • leading/locales/ar.pak
  • leading/locales/ar.pak.info
  • leading/locales/bg.pak
  • leading/locales/bg.pak.info
  • leading/locales/bn.pak
  • leading/locales/bn.pak.info
  • leading/locales/ca.pak
  • leading/locales/ca.pak.info
  • leading/locales/cs.pak
  • leading/locales/cs.pak.info
  • leading/locales/da.pak
  • leading/locales/da.pak.info
  • leading/locales/de.pak
    .ps1
  • leading/locales/de.pak.info
  • leading/locales/el.pak
  • leading/locales/el.pak.info
  • leading/locales/en-GB.pak
  • leading/locales/en-GB.pak.info
  • leading/locales/en-US.pak
  • leading/locales/en-US.pak.info
  • leading/locales/en-XA.pak
  • leading/locales/en-XA.pak.info
  • leading/locales/es-419.pak
  • leading/locales/es-419.pak.info
  • leading/locales/es.pak
  • leading/locales/es.pak.info
  • leading/locales/et.pak
  • leading/locales/et.pak.info
  • leading/locales/fa.pak
  • leading/locales/fa.pak.info
  • leading/locales/fi.pak
  • leading/locales/fi.pak.info
  • leading/locales/fil.pak
  • leading/locales/fil.pak.info
  • leading/locales/fr.pak
  • leading/locales/fr.pak.info
  • leading/locales/gu.pak
  • leading/locales/gu.pak.info
  • leading/locales/he.pak
  • leading/locales/he.pak.info
  • leading/locales/hi.pak
  • leading/locales/hi.pak.info
  • leading/locales/hr.pak
  • leading/locales/hr.pak.info
  • leading/locales/hu.pak
  • leading/locales/hu.pak.info
  • leading/locales/id.pak
  • leading/locales/id.pak.info
  • leading/locales/it.pak
  • leading/locales/it.pak.info
  • leading/locales/ja.pak
  • leading/locales/ja.pak.info
  • leading/locales/kn.pak
  • leading/locales/kn.pak.info
  • leading/locales/ko.pak
  • leading/locales/ko.pak.info
  • leading/locales/lt.pak
  • leading/locales/lt.pak.info
  • leading/locales/lv.pak
  • leading/locales/lv.pak.info
  • leading/locales/ml.pak
  • leading/locales/ml.pak.info
  • leading/locales/mr.pak
  • leading/locales/mr.pak.info
  • leading/locales/ms.pak
  • leading/locales/ms.pak.info
  • leading/locales/nb.pak
  • leading/locales/nb.pak.info
  • leading/locales/nl.pak
  • leading/locales/nl.pak.info
  • leading/locales/pl.pak
  • leading/locales/pl.pak.info
  • leading/locales/pt-BR.pak
  • leading/locales/pt-BR.pak.info
  • leading/locales/pt-PT.pak
  • leading/locales/pt-PT.pak.info
  • leading/locales/ro.pak
  • leading/locales/ro.pak.info
  • leading/locales/ru.pak
  • leading/locales/ru.pak.info
  • leading/locales/sk.pak
  • leading/locales/sk.pak.info
  • leading/locales/sl.pak
  • leading/locales/sl.pak.info
  • leading/locales/sr.pak
  • leading/locales/sr.pak.info
  • leading/locales/sv.pak
  • leading/locales/sv.pak.info
  • leading/locales/sw.pak
  • leading/locales/sw.pak.info
  • leading/locales/ta.pak
  • leading/locales/ta.pak.info
  • leading/locales/te.pak
  • leading/locales/te.pak.info
  • leading/locales/th.pak
  • leading/locales/th.pak.info
  • leading/locales/tr.pak
  • leading/locales/tr.pak.info
  • leading/locales/uk.pak
  • leading/locales/uk.pak.info
  • leading/locales/ur.pak
  • leading/locales/ur.pak.info
  • leading/locales/vi.pak
  • leading/locales/vi.pak.info
  • leading/locales/zh-CN.pak
  • leading/locales/zh-CN.pak.info
  • leading/locales/zh-TW.pak
  • leading/locales/zh-TW.pak.info
  • leading/node.dll
    .dll windows x64

    68f4993ee112facb96f863f1759e5720


    Headers

    Imports

    Exports

    Sections

  • leading/notification_helper.exe
    .exe windows x64

    fecb8e5e351ac6cadd9027233701d7f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • leading/nw.dll
    .dll windows x64

    f072cf7584c20cd370f7ce131dd31efe


    Headers

    Imports

    Exports

    Sections

  • leading/nw_100_percent.pak
  • leading/nw_200_percent.pak
  • leading/nw_elf.dll
    .dll windows x64

    c2d4df2d5e3c76562d604eae7e457d2e


    Headers

    Imports

    Exports

    Sections

  • leading/package.json
  • leading/resources.pak
  • leading/swiftshader/libEGL.dll
    .dll windows x64

    67db432914b7baa0738050364c019173


    Headers

    Imports

    Exports

    Sections

  • leading/swiftshader/libGLESv2.dll
    .dll windows x64

    8b4ec8564c21d6087c06b61d3d5ffbbd


    Headers

    Imports

    Exports

    Sections

  • leading/v8_context_snapshot.bin
  • leading/vk_swiftshader.dll
    .dll windows x64

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • leading/vk_swiftshader_icd.json
  • leading/vulkan-1.dll
    .dll windows x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections