General

  • Target

    flare-vm-main.zip

  • Size

    185KB

  • MD5

    a05b9c200e651c85c6fd8881802913ed

  • SHA1

    df1f93a27497db6a1b945e864b47072084c9c76b

  • SHA256

    23c04308d37f2eea85824a761849acbb7ed229f2af73c56ce0af07a50683b0bc

  • SHA512

    000e7cbf38d87becc36122841407d3fc336d3cb97b73f55a21b840d20088567613cef61379ecf520049b9a1c2b251aaa0e5d8293be8091be87ac3302fcf0abd2

  • SSDEEP

    3072:t94skSNsyLbB4qtwJc1OD1mGDCkBVjerpJinSH/SPMMq7BwqAVVFCVyU6BR2U6hI:ttVyqr+KcZdmV8jPtq7BXVyrB8t5yvuq

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
ps1.dropper

https://boxstarter.org/bootstrapper.ps1

exe.dropper

https://raw.githubusercontent.com/mandiant/flare-vm/main/config.xml

Signatures

Files

  • flare-vm-main.zip
    .zip
  • flare-vm-main/.gitattributes
  • flare-vm-main/.github/ISSUE_TEMPLATE/bug_report.md
  • flare-vm-main/.gitignore
  • flare-vm-main/LICENSE.txt
  • flare-vm-main/README.md
  • flare-vm-main/config.xml
    .xml
  • flare-vm-main/flarevm.png
    .png
  • flare-vm-main/install.ps1
    .ps1
  • flare-vm-main/installer_gui.png
    .png