General

  • Target

    Dork_Searcher_v3.zip

  • Size

    64.8MB

  • MD5

    b8b87ac35382afeea0a3d998276924cb

  • SHA1

    ae77d0fb6fd3d74890c7530e473e1336345af278

  • SHA256

    d75f121a4a8febece59348b4e60a7eae1206931b6c1a39e0163cc1fbab65980e

  • SHA512

    53bfbcb7c19a1fa33be4e27d14207f8ca97d26e8d83fed748137a2496066339e470ec89929eedcc1679efd2cb8930373fc3cdcec99a0a42c7b45ff455fb10f62

  • SSDEEP

    1572864:dqPPxdoKCV/HgIdNjZ3rdjjsp4UOn7CirarON7DBVb:UPP8KCVfgEB19fdrarORDBVb

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Dork_Searcher_v3.zip
    .zip

    Password: 1

  • Dork_Searcher_v3/AntiPublic/Setting.dat
  • Dork_Searcher_v3/AntiPublic/link.db
  • Dork_Searcher_v3/Dork Searcher v3.exe
    .exe windows x86

    Password: 1

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Dork_Searcher_v3/System.Data.SQLite.dll
    .dll windows x86

    Password: 1

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Dork_Searcher_v3/x64/SQLite.Interop.dll
    .dll windows x64

    Password: 1

    dfe93356a5a3a0b9440e3c9a6059e32d


    Headers

    Imports

    Exports

    Sections

  • Dork_Searcher_v3/x86/SQLite.Interop.dll
    .dll windows x86

    Password: 1

    5aa1a11a133cd3f1269809855262840f


    Headers

    Imports

    Exports

    Sections

  • Dork_Searcher_v3/xNet.dll
    .dll windows x86

    Password: 1

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections