Overview

overview

10

Static

static

10

VAST.zip

windows7-x64

1

VAST.zip

windows10-2004-x64

1

!VAST/VastGen.exe

windows7-x64

7

!VAST/VastGen.exe

windows10-2004-x64

7

main.pyc

windows7-x64

3

main.pyc

windows10-2004-x64

3

!VAST/config.toml

windows7-x64

3

!VAST/config.toml

windows10-2004-x64

3

!VAST/data/bios.txt

windows7-x64

1

!VAST/data/bios.txt

windows10-2004-x64

1

!VAST/data...es.txt

windows7-x64

1

!VAST/data...es.txt

windows10-2004-x64

1

!VAST/data...es.vbs

windows7-x64

1

!VAST/data...es.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VAST.zip

  • Size

    43.3MB

  • MD5

    27a4d4a223125dc61d11860c57e8ac3b

  • SHA1

    f5b4ae5361493c01fcc3e6089b0d75c3e36bd824

  • SHA256

    27a94b5c46b4f4b31e422b1b93d44c2276fb3701f9cb0f03f80b85ac052d17cc

  • SHA512

    3b7cc97249d8e0484bd9e76260e1823fd87914d20d0e5784499a6224d203386cbcae67c26b4742ddb3427b5a3e7da28f2b8e60b335c45817a91d95cef1df7773

  • SSDEEP

    786432:VNsBpebGIhyl1WH/ohG6ts+ppnts/8HPLxeCmhPJ7b79xCO5NeR/LBsK17e0VK:vsXebGKrH/f6ts+ppnuCPLxjmlFfbeRM

Score
10/10
pyinstallersnakebotsnakebot

Malware Config

Signatures

  • Snakebot family
    snakebot
  • Contains SnakeBOT related strings 1 IoCs
    snakebot
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • VAST.zip
    .zip
  • !VAST/VastGen.exe
    .exe windows:5 windows x64 arch:x64

    380d2cbec5e800eecb6612f15b9ac012


    Headers

    Imports

    Sections

  • main.pyc
  • !VAST/config.toml
  • !VAST/data/bios.txt
  • !VAST/data/proxies.txt
  • !VAST/data/usernames.txt
    .vbs