General

  • Target

    3d3992a212289134ba262f64508cf177

  • Size

    8.0MB

  • MD5

    3d3992a212289134ba262f64508cf177

  • SHA1

    fbee89253394b636c49f778de7967693e3229cf7

  • SHA256

    767bba769f8e938392a4876e098144f65c5f04479b635738a68e7200dde98799

  • SHA512

    ced518ce86a4c318aed0d9a54371d1fa7efa5b3ff6f0810e567be12aff62fd501ce4f9e252b5ba2efcab564f084267d2f1b8196c15e0ec398fc78c321cf72e4d

  • SSDEEP

    196608:Lu2w58pmjY3w8CsOXl8Pfx7uIkKt1b4MK1NRAgAPeX32MdixHg:Q5Rjf9s8afx7uI7t1kMK7hAPeX32MdIg

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d3992a212289134ba262f64508cf177
    .rar
  • Hvh420King$.exe
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • READ ME.txt
  • hvhKing$.dll
    .dll windows:6 windows x86 arch:x86

    16baad0f45a35208738765e80d927865


    Headers

    Imports

    Exports

    Sections

  • ПРОЧТИ МЕНЯ.txt