General

  • Target

    AEFN.rar

  • Size

    345KB

  • MD5

    38af84d421f0b88ebafe9b68b8e4ac48

  • SHA1

    1a6afbffb542bc184e3234a3cbc754a91dc2361a

  • SHA256

    aef6a51c50c34e012c5b3f8b790531fe87fc058b937d7fc97699dd8311580962

  • SHA512

    62d1581bb18d7a1c68aa95d6d4855c819cdaddd35d141754bc58c782e57bc8c7149b3fd13b0200c2b7987b8d5acbed18061f7fd34abcacd3034f15ef385115a0

  • SSDEEP

    6144:5JeYzC2cATG+ookihXDTuPcpcKvGio6sRdD8qrfWShaYSRFvtNj3/7DcT:b5C2cAi+oohXDTpvC6sRFJC0avjT70

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • AEFN.rar
    .rar

    Password: buff

  • GeforceNOW.exe
    .exe windows:6 windows x64 arch:x64

    Password: buff

    57cd1c3d46915de1bd47be5141759d0b


    Headers

    Imports

    Sections

  • mapper.exe
    .exe windows:6 windows x64 arch:x64

    Password: buff

    87877434cc5ccb8c3f984e3dd6b73bb9


    Headers

    Imports

    Sections

  • racballs.sys
    .sys windows:10 windows x64 arch:x64

    dab06766af6787054a656ec789a0ae81


    Code Sign

    Headers

    Imports

    Sections