General

  • Target

    39c37c8d2f4d63ee3fbcc05c4975687a

  • Size

    1.1MB

  • MD5

    39c37c8d2f4d63ee3fbcc05c4975687a

  • SHA1

    a8ce07440b9eace9d1ecfad72a10e84239959d7d

  • SHA256

    98b14842c7dd30757d9aacbef41ec7f58afa5d5a4ceeae2e83c6d9cf69f8e82b

  • SHA512

    1ecbdd089c13528ef698e1821b235e57080cd5672203428655b0a2449bcfa217e3c5ae2a20b9fe0798d36f5077825c0015351dc2514883951ebe3e2c0d1cf6e6

  • SSDEEP

    24576:lSHDLfPgB3/pF3qR9XN30wo80ND4fg/fBG/VJQKkE0x9EhrE2zENO903GsW:lSgBhCd30t88D4afcnkE0eQ2IN80Wp

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39c37c8d2f4d63ee3fbcc05c4975687a
    .rar
  • huoyan/freeocean/OC免费版.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • huoyan/freeocean/Operate.ini
  • huoyan/freeocean/SERVER.dat
  • huoyan/freeocean/db1.mdb
  • huoyan/freeocean/功能介绍.txt
  • huoyan/freeocean/海洋远程控制网址.url
    .url