Resubmissions

10/10/2023, 15:02

231010-selszseb6v 7

General

  • Target

    12255350002.zip

  • Size

    58.1MB

  • MD5

    d80a97d8bd02659fc0e8e7d7a95d49dd

  • SHA1

    9b3fd04fe4ae36c5d87d13640bd75b408f233ad6

  • SHA256

    e7d2c68e0d8fe4acc109d27eb4ae260ac10b0a44c6fcb36ef4be2b57e7a93e24

  • SHA512

    798c6c077c8a21d27fded9739693ade9bb7be77d9ab9f15f1fc80deeacefe186e72bd9a632d6779cbf1af7a61b2f7642878331785bf1dc8975b5955cac6a3227

  • SSDEEP

    1572864:7EcxUm2Ibr5VDxk93TzAE+do7XVzI7vLHqfQ2CzyiVTq3caRn:K1kkFMEXXVu92CztXqn

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 12255350002.zip
    .zip

    Password: infected

  • 22c13704a9bc3877972c4eb7fbae1e7c88df3006a423d7d569ecc6f1f2761069
    .rar

    Password: infected

  • EaseUS RecExperts Pro 2.9.5/AGFY - Discord Server.url
    .url
  • EaseUS RecExperts Pro 2.9.5/AGFY - Games & Software.url
    .url
  • EaseUS RecExperts Pro 2.9.5/AMFY - Movies & Series.url
    .url
  • EaseUS RecExperts Pro 2.9.5/EaseUS RecExperts Pro/Setup.exe
    .exe windows:6 windows x86

    Password: infected

    5a594319a0d69dbc452e748bcf05892e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EaseUS RecExperts Pro 2.9.5/EaseUS RecExperts Pro/crack/ActiveMgr.dll
    .dll windows:6 windows x86

    Password: infected

    34cfd0673744563fd50442bc86d6ec69


    Headers

    Imports

    Exports

    Sections

  • EaseUS RecExperts Pro 2.9.5/EaseUS RecExperts Pro/crack/RecExperts.exe
    .exe windows:6 windows x86

    Password: infected

    e0b5fe1b9238b4c4c6c80ec1147a2415


    Headers

    Imports

    Sections

  • EaseUS RecExperts Pro 2.9.5/Instructions.txt