General

  • Target

    3b325de9ff5318a1d71875b7e108190b

  • Size

    1.2MB

  • MD5

    3b325de9ff5318a1d71875b7e108190b

  • SHA1

    613112959e20ace2a692ab6beeb16c9f864928d6

  • SHA256

    6bd45a15a02d11ae7fe489bdfa30c9aad64527b85cd41956292780f7a1a33de4

  • SHA512

    f45473b340e3498f63fcdc9a7fb62c8fe6303e6578796179ac3954eff5e089daf1d340dcf54e7779facf1cd89cdf571a777ffc5f9af9b506c36e991f45fb4b69

  • SSDEEP

    24576:mJ53bHm/wfxA+ghCjPfk9vz+6HhAawT7wm0pfd92FcEEaplW7QEIl7pJEGe7h3WU:65rweCzUf0RhYvIl92FHTpdEIMGyv

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b325de9ff5318a1d71875b7e108190b
    .zip
  • Teleport Z8.JPG
    .jpg
  • aimbot 27.9.exe
    .exe windows:5 windows x86 arch:x86

    eaac98d27f5371153cb3881cdbaa9328


    Headers

    Imports

    Sections

  • aimbot.dll
    .dll windows:4 windows x86 arch:x86

    26693d2574200a3c1b465aff0f450570


    Headers

    Imports

    Sections

  • lib.dll
  • teleport PH.JPG
    .jpg