General

  • Target

    fb1b28451027a3382bbcd80a45b4042c

  • Size

    4.5MB

  • MD5

    fb1b28451027a3382bbcd80a45b4042c

  • SHA1

    c9418d1586b4ddb014372adacb239a0a070251e0

  • SHA256

    9f80fce1070803fa29f5bdc632cd06dfc4316a87b94f564b9ecebb014ca221a9

  • SHA512

    3a795f2e9f2002a8c1baa36c68f1ac6ac8094b28c37d55265dff5fc73f967fde5acebb04d61fce7209a8489c9055cb64934fd8579bd57c82c5f539f3813daecd

  • SSDEEP

    98304:O6n3VD27TgG5dppKNh1sCkxY+MP62ini0f2ml79iRD6WG0SjIDcuuHnna:O/gA4h1nOo3Ki6lsRD6H9Iouka

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • fb1b28451027a3382bbcd80a45b4042c
    .zip
  • 03_Swallowtail/amd64/setup64.dat
    .exe windows:6 windows x64 arch:x64

    7f208a5d937c7ecc1533e8eea1954233


    Code Sign

    Headers

    Imports

    Sections

  • 03_Swallowtail/amd64/sscdbus.sys
    .sys windows:6 windows x64 arch:x64

    0fa269c73aa09be8ef7af8cc28fc8dde


    Code Sign

    Headers

    Imports

    Sections

  • 03_Swallowtail/amd64/sscdcmnt.sys
    .sys windows:6 windows x64 arch:x64

    b146713878e3df5ea09131287b8538a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 03_Swallowtail/amd64/sscdmdfl.sys
    .sys windows:6 windows x64 arch:x64

    dccccaf7a5cc7895e66073fd406be6fb


    Code Sign

    Headers

    Imports

    Sections

  • 03_Swallowtail/amd64/sscdmdm.sys
    .sys windows:6 windows x64 arch:x64

    044cdd2172e19410afd4f5150bbb3168


    Code Sign

    Headers

    Imports

    Sections

  • 03_Swallowtail/amd64/sscdserd.sys
    .sys windows:6 windows x64 arch:x64

    68ccc9464e4420682b83b42a08848dee


    Code Sign

    Headers

    Imports

    Sections

  • 03_Swallowtail/amd64/sscdwhnt.sys
    .sys windows:6 windows x64 arch:x64

    74ca606feae01ee73b7705e9d52f9160


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 03_Swallowtail/i386/sscdbus.sys
    .sys windows:5 windows x86 arch:x86

    6b1bb67364c146474038087288dd14cc


    Code Sign

    Headers

    Imports

    Sections

  • 03_Swallowtail/i386/sscdcmnt.sys
    .sys windows:5 windows x86 arch:x86

    9d7ba6670faea8756b9a63e5e66d4304


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 03_Swallowtail/i386/sscdmdfl.sys
    .sys windows:5 windows x86 arch:x86

    8087248d407428b531434f2a866cdb6a


    Code Sign

    Headers

    Imports

    Sections

  • 03_Swallowtail/i386/sscdmdm.sys
    .sys windows:5 windows x86 arch:x86

    66eb797a07036da0aac3cbb959842e8a


    Code Sign

    Headers

    Imports

    Sections

  • 03_Swallowtail/i386/sscdserd.sys
    .sys windows:5 windows x86 arch:x86

    ddae67bd621c6e882a31a08e9a4f2f2d


    Code Sign

    Headers

    Imports

    Sections

  • 03_Swallowtail/i386/sscdwhnt.sys
    .sys windows:5 windows x86 arch:x86

    e7b48205b38b5f58ccd42b3e24fcbb42


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 03_Swallowtail/sscdbus.cat
  • 03_Swallowtail/sscdbus.inf
  • 03_Swallowtail/sscdmdm.cat
  • 03_Swallowtail/sscdsdm2.inf
  • 03_Swallowtail/sscdserd.cat
  • 03_Swallowtail/sscdw2k.inf
  • 16_Shrewsbury/amd64/WdfCoInstaller01005.dll
    .dll windows:6 windows x64 arch:x64

    831f1fc1bf81528bc9624d69c49d6e74


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 16_Shrewsbury/amd64/setup64.dat
    .exe windows:6 windows x64 arch:x64

    987936319fc272503429da0680636e08


    Code Sign

    Headers

    Imports

    Sections

  • 16_Shrewsbury/amd64/ssadadb.sys
    .sys windows:6 windows x64 arch:x64

    9083f2143fcef9194acc05c823d167d6


    Code Sign

    Headers

    Imports

    Sections

  • 16_Shrewsbury/amd64/ssadbus.sys
    .sys windows:6 windows x64 arch:x64

    cc141c600967b3b002236bc94ff83148


    Code Sign

    Headers

    Imports

    Sections

  • 16_Shrewsbury/amd64/ssadcmnt.sys
    .sys windows:6 windows x64 arch:x64

    b146713878e3df5ea09131287b8538a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 16_Shrewsbury/amd64/ssadmdfl.sys
    .sys windows:6 windows x64 arch:x64

    dccccaf7a5cc7895e66073fd406be6fb


    Code Sign

    Headers

    Imports

    Sections

  • 16_Shrewsbury/amd64/ssadmdm.sys
    .sys windows:6 windows x64 arch:x64

    5bb121a69e02ae8a43ada4aac0b90ba8


    Code Sign

    Headers

    Imports

    Sections

  • 16_Shrewsbury/amd64/ssadserd.sys
    .sys windows:6 windows x64 arch:x64

    71b25e5b94881eaece6a423bcd70d181


    Code Sign

    Headers

    Imports

    Sections

  • 16_Shrewsbury/amd64/ssadwhnt.sys
    .sys windows:6 windows x64 arch:x64

    74ca606feae01ee73b7705e9d52f9160


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 16_Shrewsbury/i386/WdfCoInstaller01005.dll
    .dll windows:6 windows x86 arch:x86

    467ea76ea189d0499d3ec487bbd6fff9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 16_Shrewsbury/i386/ssadadb.sys
    .sys windows:6 windows x86 arch:x86

    7b96e98a0de7089ea8895df9e05a8c1e


    Code Sign

    Headers

    Imports

    Sections

  • 16_Shrewsbury/i386/ssadbus.sys
    .sys windows:5 windows x86 arch:x86

    f9302de069a42a3d0cfeae8c1ebce526


    Code Sign

    Headers

    Imports

    Sections

  • 16_Shrewsbury/i386/ssadcmnt.sys
    .sys windows:5 windows x86 arch:x86

    9d7ba6670faea8756b9a63e5e66d4304


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 16_Shrewsbury/i386/ssadmdfl.sys
    .sys windows:5 windows x86 arch:x86

    8087248d407428b531434f2a866cdb6a


    Code Sign

    Headers

    Imports

    Sections

  • 16_Shrewsbury/i386/ssadmdm.sys
    .sys windows:5 windows x86 arch:x86

    490317c012bde66675fb9c3a358fd282


    Code Sign

    Headers

    Imports

    Sections

  • 16_Shrewsbury/i386/ssadserd.sys
    .sys windows:5 windows x86 arch:x86

    0ad49002ba52d3d6e6d051739690b033


    Code Sign

    Headers

    Imports

    Sections

  • 16_Shrewsbury/i386/ssadwhnt.sys
    .sys windows:5 windows x86 arch:x86

    e7b48205b38b5f58ccd42b3e24fcbb42


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 16_Shrewsbury/ssadadb.cat
  • 16_Shrewsbury/ssadadb2.inf
  • 16_Shrewsbury/ssadbus.cat
  • 16_Shrewsbury/ssadbus.inf
  • 16_Shrewsbury/ssadmdm.cat
  • 16_Shrewsbury/ssadmdm2.inf
  • 16_Shrewsbury/ssadndis.cat
  • 16_Shrewsbury/ssadndis.inf
  • 16_Shrewsbury/ssadsdm2.inf
  • 16_Shrewsbury/ssadserd.cat
  • AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • adb.exe
    .exe windows:4 windows x86 arch:x86

    a76314a1de551ff40a8189637efb37ea


    Headers

    Imports

    Sections

  • rageagainstthecage
    .elf linux arm