Static

static

3

Resubmissions

11/11/2023, 20:17

231111-y2xrnabd6v 8

Sharing

Copy URL Twitter E-mail

General

  • Target

    [email protected]

  • Size

    17.0MB

  • MD5

    24ef2d2ec6a2614a35de15ccb9ae8173

  • SHA1

    93b5ff12acd870044a08c10f17ff27e9c479bafb

  • SHA256

    ed238de466d3e5a9a0509134d0806a83d8bd1ca08fab89748144696b8cd5f8ab

  • SHA512

    2d8f3c7147d4051f42ccdf51bf81136ee179b128ba1fc5f56a368c90d7876a25f6020d324504eaaa8e067d7ebd1c2bd6a3d032d7a83d0e55f9e6b61bcb2e8d9d

  • SSDEEP

    393216:9RY/9KVXxS6L26Ez+w0zoEyhm5PMUgrcEIxmEnM2XPXVj/6vJUc9o:zY/9OL2z+woA2MUIuxmOEScW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • [email protected]
    .zip

    Password: 2023

  • [email protected]
    .rar

    Password: 2023

  • che@tHUB/CMap/Identity-H
  • che@tHUB/CMap/Identity-V
  • che@tHUB/CMap/Locals/am.pak
  • che@tHUB/CMap/Locals/ar.pak
  • che@tHUB/CMap/Locals/fi.pak
  • che@tHUB/CMap/Locals/fil.pak
  • che@tHUB/CMap/Locals/fr.pak
  • che@tHUB/CMap/Locals/gu.pak
  • che@tHUB/CMap/Locals/he.pak
  • che@tHUB/CMap/Locals/hi.pak
  • che@tHUB/CMap/Locals/hr.pak
  • che@tHUB/CMap/Locals/hu.pak
  • che@tHUB/CMap/Locals/id.pak
  • che@tHUB/CMap/Locals/lt.pak
  • che@tHUB/CMap/Locals/lv.pak
  • che@tHUB/CMap/Locals/x64/AdonisUI.ClassicTheme.dll
    .dll windows:4 windows x86

    Password: 2023

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • che@tHUB/CMap/Locals/x64/AdonisUI.ClassicTheme.xml
    .xml
  • che@tHUB/CMap/Locals/x64/AdonisUI.dll
    .dll windows:4 windows x86

    Password: 2023

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • che@tHUB/CMap/Locals/x64/AdonisUI.xml
    .xml
  • che@tHUB/CMap/Locals/x64/SQLite.Interop.dll
    .dll windows:6 windows x64

    Password: 2023

    a42f73521c784fa06f1d886fcbcefcba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/CMap/Locals/x86/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86

    Password: 2023

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • che@tHUB/CMap/Locals/x86/BouncyCastle.Crypto.xml
    .xml
  • che@tHUB/CMap/Locals/x86/SQLite.Interop.dll
    .dll windows:6 windows x86

    Password: 2023

    39ace63b362beb47a2a7a8202a5c4f2d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/CMap/UCS2-GBK-EUC
  • che@tHUB/CMap/UniKS-UTF16-H
  • che@tHUB/CMap/UniKS-UTF16-V
  • che@tHUB/[email protected]
    .exe windows:4 windows x86

    Password: 2023

    44815096448dfd22ddf0ba1275ee43f7


    Headers

    Imports

    Sections

  • che@tHUB/demux/libadaptive_plugin.dll
    .dll windows:4 windows x64

    Password: 2023

    7f44bc5c736a5be88bc345aee31d3cfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libaiff_plugin.dll
    .dll windows:4 windows x64

    09480affdefc78e00ad91896808aa857


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libasf_plugin.dll
    .dll windows:4 windows x64

    747cd74131f6a6bf0bd82baf6366d343


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libau_plugin.dll
    .dll windows:4 windows x64

    9b9f9252d833e964870da3e3cf4b7f6f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libavi_plugin.dll
    .dll windows:4 windows x64

    48f9809878f8c16d045bb00bb57d49e5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libcaf_plugin.dll
    .dll windows:4 windows x64

    cbba7d2d7a50708d5f89400417d739bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libdemux_cdg_plugin.dll
    .dll windows:4 windows x64

    c331faaccd7acd1c8b57a5b7eec99b8a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libdirectory_demux_plugin.dll
    .dll windows:4 windows x64

    825563512f7b47245d152ea939903314


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libes_plugin.dll
    .dll windows:4 windows x64

    5538c2bec1e5ed822993ac669e658b8e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libflacsys_plugin.dll
    .dll windows:4 windows x64

    024644197bea3fe6dd89431c02a83d71


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libh26x_plugin.dll
    .dll windows:4 windows x64

    ffbe5ed04d6d003bf1fa70d4c9fff7fa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libimage_plugin.dll
    .dll windows:4 windows x64

    a9d34197a2a3b205e2758202c08747af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libmjpeg_plugin.dll
    .dll windows:4 windows x64

    91005a8306c416a166da8e4d0eeaa686


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libmkv_plugin.dll
    .dll windows:4 windows x64

    e0b67baad922459c18eaca60ef8ba4bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libmod_plugin.dll
    .dll windows:4 windows x64

    0bd0e2f8b1fa61eacdfbaa6f33b81515


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libmp4_plugin.dll
    .dll windows:4 windows x64

    aab3f128c6b1c10ca4b4a7f1bc51a063


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libmpc_plugin.dll
    .dll windows:4 windows x64

    86d7588fe04e95a69ab261cd3b005418


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libmpgv_plugin.dll
    .dll windows:4 windows x64

    83c406f5009b43548851f7ebf272802e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libnoseek_plugin.dll
    .dll windows:4 windows x64

    649cecf4b2ce900c6512733c29149b2a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libnsc_plugin.dll
    .dll windows:4 windows x64

    a2aa4d5004e9eab89148e18626ad6c15


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libnsv_plugin.dll
    .dll windows:4 windows x64

    09480affdefc78e00ad91896808aa857


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libnuv_plugin.dll
    .dll windows:4 windows x64

    4516989100febce04a4607cd32950dff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libogg_plugin.dll
    .dll windows:4 windows x64

    0678aa6318ac0233109abb1a03d29385


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libplaylist_plugin.dll
    .dll windows:4 windows x64

    d1c93dec03e7aa69118ccc21d17b8a44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libps_plugin.dll
    .dll windows:4 windows x64

    ce4ef7544b421821ef6dd5df4e83f67c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libpva_plugin.dll
    .dll windows:4 windows x64

    774d6d302486335a64f0277481c583c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/librawaud_plugin.dll
    .dll windows:4 windows x64

    812333718fe4e1cd42d95b5ca40009f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/librawdv_plugin.dll
    .dll windows:4 windows x64

    7f2bf78f47bcc763afce02429723bce7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/librawvid_plugin.dll
    .dll windows:4 windows x64

    71f2d6dc95a72d6c314e9f1e566b245b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libreal_plugin.dll
    .dll windows:4 windows x64

    636bf3ac6d8eb6c5280016141925a901


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libsid_plugin.dll
    .dll windows:4 windows x64

    e42e8da6d13c503a5ddefca17f77412a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libsmf_plugin.dll
    .dll windows:4 windows x64

    039c2d72e10c2d26dad1680bfb4f3698


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libsubtitle_plugin.dll
    .dll windows:4 windows x64

    2bf92130461e400061e844599ab64b40


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libts_plugin.dll
    .dll windows:4 windows x64

    d042412f555cab5a3e0d71c420e219b4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libtta_plugin.dll
    .dll windows:4 windows x64

    ef331b3f8e7f7c71195b232df0e1db56


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libty_plugin.dll
    .dll windows:4 windows x64

    88a3f13c36759cbb2da2f8bfba9d4100


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libvc1_plugin.dll
    .dll windows:4 windows x64

    bc92b1ca50503013044d3e0b3af064f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libvobsub_plugin.dll
    .dll windows:4 windows x64

    f941f0dd148bd5125c6aa6f1f13c405f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libvoc_plugin.dll
    .dll windows:4 windows x64

    e10d8e3372046b3c66224e09d3011259


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libwav_plugin.dll
    .dll windows:4 windows x64

    64a20a84978596df3fccd44a96bfb2af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/demux/libxa_plugin.dll
    .dll windows:4 windows x64

    7c03b546030bfa88c16e75da1d70307e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/AMD64/vstor2-mntapi20-shared.sys
    .sys windows:6 windows x64

    1237b4dd99e535a333942f70ae004212


    Code Sign

    Headers

    Imports

    Sections

  • che@tHUB/lib/AMD64/vstor2-x64.sys
    .sys windows:6 windows x64

    3d4a16e3109f5295d8cbcada460ba47e


    Headers

    Imports

    Sections

  • che@tHUB/lib/AMD64/vstor2-x86.sys
    .sys windows:6 windows x86

    cd6e013227a31b45efc2fbcdd1a07151


    Headers

    Imports

    Sections

  • che@tHUB/lib/AMD64/vstor2.cat
  • che@tHUB/lib/AMD64/vstor2.inf
  • che@tHUB/lib/expat.dll
    .dll windows:6 windows x64

    6b44fccd71dba70aac211207c97d024e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/glib-2.0.dll
    .dll windows:6 windows x64

    ce2f875d8951d0e9b3509856e8b884f5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/gobject-2.0.dll
    .dll windows:6 windows x64

    11aedb8049063fbf96f92d5c838c70f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/gthread-2.0.dll
    .dll windows:6 windows x64

    4366a24603338f8c0f465a69d567401b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/gvmomi.dll
    .dll windows:6 windows x64

    f8ea8926c0db26789ca15ef512db3be4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/iconv.dll
    .dll windows:6 windows x64

    0a4b54f6d6e0632e747539e85645c94a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/intl.dll
    .dll windows:6 windows x64

    b1609a5afa213774e204949fc55ed727


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/libcurl.dll
    .dll windows:6 windows x64

    5be037a950b4200b7a4536120e234d9d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/libeay32.dll
    .dll windows:6 windows x64

    dd8f10626b82b0fafe231ab786bff83d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/liblber.dll
    .dll windows:5 windows x64

    59a279efc04bd6d06c39783e7b812c4e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/libldap.dll
    .dll windows:5 windows x64

    259d9e5c6648b09ac082d2d00abbce5b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/libldap_r.dll
    .dll windows:5 windows x64

    76eee82d14b11354b56a19e5640024b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/libxml2.dll
    .dll windows:6 windows x64

    6166d30d3c527e375696c1f6af288716


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/pcre.dll
    .dll windows:6 windows x64

    77e6aa5114a09083c1c4ba3d4d0a4041


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/ssleay32.dll
    .dll windows:6 windows x64

    c42d6d682efbb38cd9fe98725d4015c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/ssoclient.dll
    .dll windows:6 windows x64

    c12c40bc912a668c594963048552cb1b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/vixDiskLibVim.dll
    .dll windows:6 windows x64

    967dc696e2d277a060ba706c2e1f6a41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/vixMntapi.dll
    .dll windows:6 windows x64

    0a9e863da1d24da317e5fde1818cd6b1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/vmacore.dll
    .dll windows:6 windows x64

    92038a1d507ae44898c8a4a8ac77189e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/vmomi.dll
    .dll windows:6 windows x64

    28989fd650edf4a5e511826db8ae3d22


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/lib/vstor2install.bat
    .bat .vbs
  • che@tHUB/lib/vstor2uninstall.bat
    .bat .vbs
  • che@tHUB/lib/zlib1.dll
    .dll windows:5 windows x64

    018e63f9f73181ffc7b6efcfada320e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • che@tHUB/vixDiskLib.dll
    .dll windows:6 windows x64

    9502ba35618b2024620ad1d4203a69db


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • psw-2023.txt