Overview

overview

7

Static

static

7

soldatserver

ubuntu-18.04-amd64

1

soldatserver.exe

windows7-x64

7

soldatserver.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a4f257fc1ebb42266ec3e85df4a81c92de1f16fcaff6024816ab693b3711273.zip.zip

  • Size

    3.5MB

  • MD5

    21f43d5d6540bd56869d761fe94dc77c

  • SHA1

    5dc692fe353cf7c3b109577038781cff092eb646

  • SHA256

    be4927a9be19cde2c289a50a435674e5931421b165cae5087719245383ce5e33

  • SHA512

    4c0fc5bbca6b97123d4fc2c78c4eedd8dc2e1d002976d8ce207339196c999ca76a7cd76ae80250676c8f794b8eca7a6692dd41e21541855f7e069a295449e0ba

  • SSDEEP

    98304:GeTWRWRLHCnRRFfL5hJG/tNBu6B8lUO9vkvcY7P1nyvkVAZrLVki:G48WR7CnRLLrJG/tDBBa8vcY7PwvkVAh

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a4f257fc1ebb42266ec3e85df4a81c92de1f16fcaff6024816ab693b3711273.zip.zip
    .zip

    Password: infected

  • 6a4f257fc1ebb42266ec3e85df4a81c92de1f16fcaff6024816ab693b3711273.zip
    .zip
  • anims/barret.poa
  • anims/bezbroni.poa
  • anims/biega.poa
  • anims/biegaranny.poa
  • anims/biegatyl.poa
  • anims/bije.poa
  • anims/celuje.poa
  • anims/celujeodrzut.poa
  • anims/change.poa
  • anims/chat.poa
  • anims/cieszy.poa
  • anims/cigar.poa
  • anims/clipin.poa
  • anims/clipout.poa
  • anims/firemode.poa
  • anims/gora.poa
  • anims/goraodrzut.poa
  • anims/kolba.poa
  • anims/krocze.poa
  • anims/kuca.poa
  • anims/kucaidzie.poa
  • anims/kucaidzietyl.poa
  • anims/laduje.poa
  • anims/lezy.poa
  • anims/lezyidzie.poa
  • anims/match.poa
  • anims/odrzut.poa
  • anims/odrzut2.poa
  • anims/pistolet.poa
  • anims/rucha.poa
  • anims/rzuca.poa
  • anims/samo.poa
  • anims/samo2.poa
  • anims/shotgun.poa
  • anims/skok.poa
  • anims/skokdolobrot.poa
  • anims/skokdolobrottyl.poa
  • anims/skokwbok.poa
  • anims/slideback.poa
  • anims/smoke.poa
  • anims/spada.poa
  • anims/stoi.poa
  • anims/strzala.poa
  • anims/stunt.poa
  • anims/szcza.poa
  • anims/takeoff.poa
  • anims/template.poa
  • anims/wipe.poa
  • anims/wstaje.poa
  • anims/wyrzuca.poa
  • anims/zmienbron.poa
  • bots/Admiral.bot
  • bots/Billy.bot
  • bots/Blain.bot
  • bots/Boogie Man.bot
  • bots/Commando.bot
  • bots/D Dave.bot
  • bots/Danko.bot
  • bots/Dutch.bot
  • bots/John.bot
  • bots/Kruger.bot
  • bots/Poncho.bot
  • bots/Roach.bot
  • bots/Sgt. Mac.bot
  • bots/Sniper.bot
  • bots/Stevie.bot
  • bots/Terminator.bot
  • changelog.txt
  • lobby_servers.txt
  • maps/Aero.PMS
  • maps/Airpirates.PMS
  • maps/Arena.PMS
  • maps/Arena2.PMS
  • maps/Arena3.PMS
  • maps/Bigfalls.PMS
  • maps/Blox.PMS
  • maps/Bridge.PMS
  • maps/Bunker.PMS
  • maps/Cambodia.PMS
  • maps/CrackedBoot.PMS
  • maps/Daybreak.PMS
  • maps/DesertWind.PMS
  • maps/Factory.PMS
  • maps/Flashback.PMS
  • maps/HH.PMS
  • maps/Island2k5.PMS
  • maps/Jungle.PMS
  • maps/Krab.PMS
  • maps/Lagrange.PMS
  • maps/Leaf.PMS
  • maps/MrSnowman.PMS
  • maps/RatCave.PMS
  • maps/Rok.PMS
  • maps/Shau.PMS
  • maps/Tigran.PMS
  • maps/Tropiccave.PMS
  • maps/Unlim.PMS
  • maps/Veoto.PMS
  • maps/changelog.txt
  • maps/ctf_Ash.PMS
  • maps/ctf_B2b.PMS
  • maps/ctf_Blade.PMS
  • maps/ctf_Campeche.PMS
  • maps/ctf_Cobra.PMS
  • maps/ctf_Death.PMS
  • maps/ctf_Division.PMS
  • maps/ctf_Dropdown.PMS
  • maps/ctf_Equinox.PMS
  • maps/ctf_Guardian.PMS
  • maps/ctf_Hormone.PMS
  • maps/ctf_IceBeam.PMS
  • maps/ctf_Kampf.PMS
  • maps/ctf_Lanubya.PMS
  • maps/ctf_Laos.PMS
  • maps/ctf_MFM.PMS
  • maps/ctf_Maya.PMS
  • maps/ctf_Mayapan.PMS
  • maps/ctf_Nuubia.PMS
  • maps/ctf_Raspberry.PMS
  • maps/ctf_Rotten.PMS
  • maps/ctf_Ruins.PMS
  • maps/ctf_Run.PMS
  • maps/ctf_Scorpion.PMS
  • maps/ctf_Snakebite.PMS
  • maps/ctf_Steel.PMS
  • maps/ctf_Triumph.PMS
  • maps/ctf_Viet.PMS
  • maps/ctf_Voland.PMS
  • maps/ctf_X.PMS
  • maps/htf_Arch.PMS
  • maps/htf_Baire.PMS
  • maps/htf_Boxed.PMS
  • maps/htf_Desert.PMS
  • maps/htf_Dorothy.PMS
  • maps/htf_Dusk.PMS
  • maps/htf_Erbium.PMS
  • maps/htf_Feast.PMS
  • maps/htf_Mossy.PMS
  • maps/htf_Muygen.PMS
  • maps/htf_Niall.PMS
  • maps/htf_Nuclear.PMS
  • maps/htf_Prison.PMS
  • maps/htf_Rubik.PMS
  • maps/htf_Star.PMS
  • maps/htf_Tower.PMS
  • maps/htf_Void.PMS
  • maps/htf_Vortex.PMS
  • maps/htf_Zajacz.PMS
  • maps/inf_Abel.PMS
  • maps/inf_April.PMS
  • maps/inf_Argy.PMS
  • maps/inf_Belltower.PMS
  • maps/inf_Biologic.PMS
  • maps/inf_Changeling.PMS
  • maps/inf_Flute.PMS
  • maps/inf_Fortress.PMS
  • maps/inf_Industrial.PMS
  • maps/inf_Messner.PMS
  • maps/inf_Moonshine.PMS
  • maps/inf_Motheaten.PMS
  • maps/inf_Outpost.PMS
  • maps/inf_Rescue.PMS
  • maps/inf_Rise.PMS
  • maps/inf_Warehouse.PMS
  • maps/inf_Warlock.PMS
  • mapslist.txt
  • objects/flag.po
  • objects/gostek.po
  • objects/karabin.po
  • objects/kit.po
  • objects/para.po
  • objects/stat.po
  • readme.txt
  • remote.txt
  • scripts/README.txt
  • scripts/default/AdminCore.pas
  • scripts/default/Core.pas
  • scripts/default/Includes.txt
  • scripts/default/NetworkCore.pas
  • scripts/default/SocketCore.pas
  • server.ini
  • soldat.ini
  • soldatserver
    .elf linux x86
  • soldatserver.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections

  • weapons.ini
  • weapons_realistic.ini