General

  • Target

    astral v2.3.zip

  • Size

    36.3MB

  • MD5

    c130a9c017bd3d6a7f22170f58d7908c

  • SHA1

    00f5ce447b49b2fb072dfff6311669b7cc97ac16

  • SHA256

    345b70c51d46604799370bf902330a94638602792c5c905599500fa7143a9bc6

  • SHA512

    74737774f6ea5764329c9b02ae38b860fc2d60daea1c31bfc71cbf3bf821b02b6fbb915999e5a092033077d1241b533fa54243a9acaa4c1984b03a1d72573823

  • SSDEEP

    393216:0DoXATFB9nSxt+JR8YobATFB9nSxt+JR8YobATFB9nSxt+JR8YoyATFB9nSxt+Jb:0DoX8B9A4g8B9A4K8B9A4t8B9A45d

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • astral v2.3.zip
    .zip

    Password: qqq

  • astral v2.3/Astral Loader.exe
    .exe windows x64

    Password: qqq

    90e532401c1a8d0d24901051a00b0c07


    Headers

    Imports

    Sections

  • astral v2.3/VMProtectSDK64.dll
    .dll windows x64

    Password: qqq

    1851ff453adce0cef5274e320d5bed3c


    Headers

    Imports

    Exports

    Sections

  • astral v2.3/cmd.pdb
  • astral v2.3/files/5.bat
    .bat .ps1
  • astral v2.3/files/Fivem astral.exe
    .exe windows x64

    Password: qqq

    0b5552dccd9d0a834cea55c0c8fc05be


    Code Sign

    Headers

    Imports

    Sections

  • �T�<ϑ.pyc
  • astral v2.3/files/astral bedrock.exe
    .exe windows x64

    Password: qqq

    0b5552dccd9d0a834cea55c0c8fc05be


    Code Sign

    Headers

    Imports

    Sections

  • �T�<ϑ.pyc
  • astral v2.3/files/astral inject.exe
    .exe windows x64

    Password: qqq

    0b5552dccd9d0a834cea55c0c8fc05be


    Code Sign

    Headers

    Imports

    Sections

  • �T�<ϑ.pyc
  • astral v2.3/files/astral.exe
    .exe windows x64

    Password: qqq

    0b5552dccd9d0a834cea55c0c8fc05be


    Code Sign

    Headers

    Imports

    Sections

  • �T�<ϑ.pyc
  • astral v2.3/files/avoiderrx64.sys
    .exe windows x64

    Password: qqq

    f9141c3df8f7ec7b3f2d46265a3b5528


    Code Sign

    Headers

    Imports

    Sections

  • astral v2.3/files/mac.bat
  • astral v2.3/files/run.bat
  • astral v2.3/files/smbios.exe
    .exe windows x64

    Password: qqq

    5d7543265f1d05f9bd6a417f4988fb48


    Headers

    Imports

    Sections

  • astral v2.3/files/start.bat
  • astral v2.3/loader.cfg
  • astral v2.3/loader.exe
    .exe windows x64

    4d4037c947eb3288dbe8b5fe569a30f5


    Headers

    Imports

    Sections