General

  • Target

    New_WinRAR_archive.rar

  • Size

    9.8MB

  • MD5

    3666925b4aa4c7302114d86d0f63d0fa

  • SHA1

    b65217f34872f01b8c1f3ef04551ff75f83e74e6

  • SHA256

    45af7f95999739c9aeb5fa56d29aea0e7c31aaf05459483813860f4d510fa9a6

  • SHA512

    b40a27867abfd43f9503fb7e5fc4021b564c5d1298b6915c85e025ab997d9f9b5cf669999fd2d877216ab71eed956334755ccef9b6c6a54fc7c5be871e9191c0

  • SSDEEP

    196608:1gwzypshgHlEySzJrq/eLUzEsalyh2OsSgnbmzXbgpNZxDaErLVFVurCXsfR4Ifx:ewaigHlPSdrSeDrlyh2OsSgnbWXyNZ1i

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • New_WinRAR_archive.rar
    .rar

    Password: infected

  • Rc7 Unpatched/0xAzul (2).dll
    .dll windows x86

    Password: infected

    1e0a2f651d87e423ffab4bddbb3945d7


    Headers

    Imports

    Sections

  • Rc7 Unpatched/Memcheck.exe
    .exe windows x86

    Password: infected

    8d92fa1956a6a631c642190121740197


    Headers

    Imports

    Sections

  • Rc7 Unpatched/Rc7 Cracked.exe
    .exe windows x64

    Password: infected

    0b5552dccd9d0a834cea55c0c8fc05be


    Code Sign

    Headers

    Imports

    Sections

  • loader-o.pyc
  • Rc7 Unpatched/lua5.1.dll
    .dll windows x86

    Password: infected

    df5ee731556844566bd09eb9e0c19cfb


    Headers

    Imports

    Exports

    Sections

  • Rc7 Unpatched/memcheck(1).dll
    .dll windows x86

    Password: infected

    3b72631172d339536ffabdc8547985e0


    Headers

    Imports

    Sections