General

  • Target

    1aafaef6528a47f8779123c257a03fc8

  • Size

    2.4MB

  • MD5

    1aafaef6528a47f8779123c257a03fc8

  • SHA1

    fdfa77e455b71e0ec60be3e084053165c590a10f

  • SHA256

    5f4754391b84923401fa2d9f12f1e3966f5c379a75da192aea97c3cbc904cd2b

  • SHA512

    c0f52490f980e6d917e3f02643136fdb45aa7e8c75f656e76c4d7b43fc7e31b88b9eb49087821baa98c8b7dac08477e7b1a63b6152f28e905692aecb32f8829a

  • SSDEEP

    49152:cwfxpNQ1uzbhpGiLNK3FS149LtpeIEsQWWdq+CLj9nSFQwi:cw/G1uHhs6NaFMstpedsQWP00

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 1aafaef6528a47f8779123c257a03fc8
    .rar
  • hrv1.0-1.03+4tr/hr10+4tr.rar
    .rar
  • Play.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • hr10+4tr.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • sILeNt heLLsCrEAm.nfo
  • hrv1.0-1.03+4tr/hrv1.01+4tr_finalfixed.rar
    .rar
  • Play.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • hrv1.01+4tr.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • sILeNt heLLsCrEAm.nfo