General

  • Target

    37c7a74a8ff438bd6f0e0a9eb8b59568114777d7dd512107f34f8f1375d4757e.zip.zip

  • Size

    2.1MB

  • MD5

    6405f36bf456665eecd69c6b6371e3ee

  • SHA1

    9da5e5eeda7d83eeec2b4f96972eb4998814303e

  • SHA256

    55011dbf1620a5a0dac2cc15e5df0ef94589e464cd2f654ec45e83ce95795086

  • SHA512

    eb657d56ca14bce5891a30c6d7cf662ceeb2a7d480c71e0fdd1138a30c6a921fa3fe7cac4517d377a86c84f5badabc2b5c46363a5881e39d76e3634bf9590c1b

  • SSDEEP

    49152:ZtsX6T5r/gzluQNmmTvB1OW5vIN4PjNi/RcvEIIqpJJ:Zt5KpTvB5xm4Pjk/avEQJ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 37c7a74a8ff438bd6f0e0a9eb8b59568114777d7dd512107f34f8f1375d4757e.zip.zip
    .zip

    Password: infected

  • 37c7a74a8ff438bd6f0e0a9eb8b59568114777d7dd512107f34f8f1375d4757e.zip
    .zip
  • eWorlds/bass.dll
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • eWorlds/eWorlds.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • eWorlds/eWorlds.nfo
  • eWorlds/ew.dat
    .rar
  • eWorlds/file_id.diz