General

  • Target

    $RRWCHUB.zip

  • Size

    78KB

  • MD5

    5f8049af5745611f35b7ca99cf828b2b

  • SHA1

    a7cace4ed0822fd73500fc61f5c4710a88f0cde6

  • SHA256

    2b12ee049dc9d008459fb3a9348fe9d52a5cabc69bd4018f86eba18b5ae0e104

  • SHA512

    e322c6a2e2697ea97ceed9f2494e0d2337b740eb9c439ab99037a14c2f0a902db3939b1bef2fa6445afc0453a99731f535b270632863fe9bf0d16f3ceb0ef636

  • SSDEEP

    1536:Gf3XEGlJtUweW2twRoD+slbIs2v3+a+MehtNBjV0OWK3j/+acRBj:63bJWwe5KRoDnbr22ajGtNJLnY

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • $RRWCHUB.zip
    .zip

    Password: infected

  • Pfjsqg.zip
    .zip
  • Pfjsqg/HexaTracer.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections