General

  • Target

    287a3c636c07074ee7278833a6029c76638f27c45f466a095a37e10f10322a83

  • Size

    11.1MB

  • MD5

    8174d64d8b566a3985852b2697c05ad0

  • SHA1

    2ae3b5645ae3958aa2f57eb044249c00b1aa5bc2

  • SHA256

    287a3c636c07074ee7278833a6029c76638f27c45f466a095a37e10f10322a83

  • SHA512

    f6dc2f48f51ed4b40a0b0bd5d96a0398a1e2c926edca746ec0338ca805544b7dace989027f403d2d422dd600ed4f437e7f9be7b3fa6e6e6da96a12ea9fa1c694

  • SSDEEP

    196608:V9/UZddj4VeJOlhNkZ+6NcYxVXkAvtnPe6Qqo24DfNsUJGUqdYI+JWl6GpX:MLQeJSNkOsPe6Qqo2UltJPqxkWcGl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 287a3c636c07074ee7278833a6029c76638f27c45f466a095a37e10f10322a83
    .zip
  • rdp/x64/Launcher.deps.json
  • rdp/x64/Launcher.dll
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • rdp/x64/Launcher.dll.config
  • rdp/x64/Launcher.exe
    .exe windows:6 windows x64

    bc869d882755376c81b17b229a3fc736


    Headers

    Imports

    Sections

  • rdp/x64/Launcher.runtimeconfig.json
  • rdp/x64/MFC14XU.dll
    .dll windows:6 windows x64

    79a1158798fb666625f740926535a969


    Headers

    Imports

    Sections

  • rdp/x64/RenderMaintainer.exe
    .exe windows:5 windows x64

    970a1b6fa4f52d56e993dbe67ba4a4ea


    Headers

    Imports

    Sections

  • rdp/x64/ShadowBotRDP.exe
    .exe windows:5 windows x64

    edc63f97fa62252258952de231db3c9b


    Code Sign

    Headers

    Imports

    Sections

  • rdp/x64/ShadowBotRDP_Win7Helper.dll
    .dll windows:6 windows x64

    f58c9ce3b9820ec27b437201ab891235


    Headers

    Imports

    Sections

  • rdp/x86/Launcher.deps.json
  • rdp/x86/Launcher.dll
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • rdp/x86/Launcher.dll.config
  • rdp/x86/Launcher.exe
    .exe windows:6 windows x86

    1a1644bdf1ef61904bef819df608fc52


    Headers

    Imports

    Sections

  • rdp/x86/Launcher.runtimeconfig.json
  • rdp/x86/MFC14XU.dll
    .dll windows:6 windows x86

    cab510432b34c8a623c634f7060ed21e


    Headers

    Imports

    Sections

  • rdp/x86/RenderMaintainer.exe
    .exe windows:5 windows x86

    4f7dd818364793bbac406f4c0be9b7de


    Headers

    Imports

    Sections

  • rdp/x86/ShadowBotRDP.exe
    .exe windows:5 windows x86

    1d0706a38de78fe4f3f2ebb7364273d9


    Code Sign

    Headers

    Imports

    Sections

  • rdp/x86/ShadowBotRDP_Win7Helper.dll
    .dll windows:6 windows x86

    21484b35f4163f37f93c048112c409d8


    Headers

    Imports

    Sections