General

  • Target

    Isopropoxide.exe-Malware-main.zip

  • Size

    15.5MB

  • MD5

    b51543fc941da8609919760b40cd396e

  • SHA1

    cd24185ddfec489463d31382c21c33a136c8f9da

  • SHA256

    f1beea3c792fad9aabab85b74b56f97b9fedef329b563cd68536268ba4159f1f

  • SHA512

    d5d8a7408c1d50c92813f7a2bb4ad171d9e54f6ef9354020dd822adc94d092b820e30004f428e3aaace33f39881fba439d5fb4e64c4770f2d41d0e1a229a0b40

  • SSDEEP

    393216:131OA1TYvHhekxpbmM6yBSBzFWVaPL+MxqNfMB6DN:l1zxmhewbnvBwzwMPLBqNfpB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • Isopropoxide.exe-Malware-main.zip
    .zip
  • Isopropoxide.exe-Malware-main/Isopropoxide.exe (pass IsopropoxideTrojanHorse).zip
    .zip
  • Isopropoxide.exe-Malware-main/Isopropoxide.exe-sourcecode.zip
    .zip
  • isopropoxide-safety/Release/isopropoxide-safety-x86.exe
    .exe windows:5 windows x86 arch:x86

    906f4d60c641bc2b0ddaabf2700ffb14


    Headers

    Imports

    Sections

  • isopropoxide-safety/Release/isopropoxide-safety.iobj
  • isopropoxide-safety/Release/isopropoxide-safety.ipdb
  • isopropoxide-safety/Release/isopropoxide-safety.pdb
  • isopropoxide-safety/isopropoxide-safety-x64.exe
    .exe windows:5 windows x64 arch:x64

    9af102b510197208482a22ce63dc3c99


    Headers

    Imports

    Sections

  • isopropoxide-safety/isopropoxide-safety-x86.exe
    .exe windows:5 windows x86 arch:x86

    906f4d60c641bc2b0ddaabf2700ffb14


    Headers

    Imports

    Sections

  • isopropoxide-safety/isopropoxide-safety.sln
  • isopropoxide-safety/isopropoxide/Release/Resource.res
  • isopropoxide-safety/isopropoxide/Release/isopropo.60a74c34.tlog/CL.command.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropo.60a74c34.tlog/CL.read.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropo.60a74c34.tlog/CL.write.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropo.60a74c34.tlog/isopropoxide-safety.lastbuildstate
  • isopropoxide-safety/isopropoxide/Release/isopropo.60a74c34.tlog/link.command.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropo.60a74c34.tlog/link.read.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropo.60a74c34.tlog/link.write.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropo.60a74c34.tlog/rc.command.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropo.60a74c34.tlog/rc.read.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropo.60a74c34.tlog/rc.write.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropoxide-safety.obj
  • isopropoxide-safety/isopropoxide/Release/isopropoxide.log
  • isopropoxide-safety/isopropoxide/Release/isopropoxide.obj
  • isopropoxide-safety/isopropoxide/Release/isopropoxide.tlog/CL.command.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropoxide.tlog/CL.read.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropoxide.tlog/CL.write.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropoxide.tlog/isopropoxide.lastbuildstate
  • isopropoxide-safety/isopropoxide/Release/isopropoxide.tlog/link.command.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropoxide.tlog/link.read.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropoxide.tlog/link.write.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropoxide.tlog/rc.command.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropoxide.tlog/rc.read.1.tlog
  • isopropoxide-safety/isopropoxide/Release/isopropoxide.tlog/rc.write.1.tlog
  • isopropoxide-safety/isopropoxide/Release/vc140.pdb
  • isopropoxide-safety/isopropoxide/Resource.aps
  • isopropoxide-safety/isopropoxide/Resource.rc
  • isopropoxide-safety/isopropoxide/isopropoxide-safety.cpp
  • isopropoxide-safety/isopropoxide/isopropoxide.ico
  • isopropoxide-safety/isopropoxide/isopropoxide.vcxproj
    .xml
  • isopropoxide-safety/isopropoxide/isopropoxide.vcxproj.filters
  • isopropoxide-safety/isopropoxide/isopropoxide.vcxproj.user
  • isopropoxide-safety/isopropoxide/resource.h
  • isopropoxide-safety/isopropoxide/x64/Release/Resource.res
  • isopropoxide-safety/isopropoxide/x64/Release/isopropo.60a74c34.tlog/CL.command.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropo.60a74c34.tlog/CL.read.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropo.60a74c34.tlog/CL.write.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropo.60a74c34.tlog/isopropoxide-safety.lastbuildstate
  • isopropoxide-safety/isopropoxide/x64/Release/isopropo.60a74c34.tlog/link.command.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropo.60a74c34.tlog/link.read.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropo.60a74c34.tlog/link.write.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropo.60a74c34.tlog/rc.command.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropo.60a74c34.tlog/rc.read.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropo.60a74c34.tlog/rc.write.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide-safety.obj
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide.log
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide.obj
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide.tlog/CL.command.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide.tlog/CL.read.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide.tlog/CL.write.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide.tlog/isopropoxide.lastbuildstate
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide.tlog/link.command.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide.tlog/link.read.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide.tlog/link.write.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide.tlog/rc.command.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide.tlog/rc.read.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/isopropoxide.tlog/rc.write.1.tlog
  • isopropoxide-safety/isopropoxide/x64/Release/vc140.pdb
  • isopropoxide-safety/x64/Release/isopropoxide-safety-x64.exe
    .exe windows:5 windows x64 arch:x64

    9af102b510197208482a22ce63dc3c99


    Headers

    Imports

    Sections

  • isopropoxide-safety/x64/Release/isopropoxide-safety.iobj
  • isopropoxide-safety/x64/Release/isopropoxide-safety.ipdb
  • isopropoxide-safety/x64/Release/isopropoxide-safety.pdb
  • isopropoxide/Isopropoxide-safety-x64.exe
    .exe windows:5 windows x64 arch:x64

    9af102b510197208482a22ce63dc3c99


    Headers

    Imports

    Sections

  • isopropoxide/Isopropoxide-safety-x86.exe
    .exe windows:5 windows x86 arch:x86

    906f4d60c641bc2b0ddaabf2700ffb14


    Headers

    Imports

    Sections

  • isopropoxide/Isopropoxide-x64.exe
    .exe windows:5 windows x64 arch:x64

    a9ddd4a436eb8b79090baef1a8e63c1e


    Headers

    Imports

    Sections

  • isopropoxide/Isopropoxide-x86.exe
    .exe windows:5 windows x86 arch:x86

    091ad0f5cf5059384f693612c7eb7a97


    Headers

    Imports

    Sections

  • isopropoxide/Isopropoxide.zip
    .zip
  • Isopropoxide-safety-x64.exe
    .exe windows:5 windows x64 arch:x64

    9af102b510197208482a22ce63dc3c99


    Headers

    Imports

    Sections

  • Isopropoxide-safety-x86.exe
    .exe windows:5 windows x86 arch:x86

    906f4d60c641bc2b0ddaabf2700ffb14


    Headers

    Imports

    Sections

  • Isopropoxide-x64.exe
    .exe windows:5 windows x64 arch:x64

    a9ddd4a436eb8b79090baef1a8e63c1e


    Headers

    Imports

    Sections

  • Isopropoxide-x86.exe
    .exe windows:5 windows x86 arch:x86

    091ad0f5cf5059384f693612c7eb7a97


    Headers

    Imports

    Sections

  • readme.txt
  • isopropoxide/PayloadMBR/Create.bat
  • isopropoxide/PayloadMBR/Data/decompress.asm
  • isopropoxide/PayloadMBR/Data/kernel.asm
  • isopropoxide/PayloadMBR/Image/Custom.bin
  • isopropoxide/PayloadMBR/Image/Custom.png
    .png
  • isopropoxide/PayloadMBR/Programs/QEMU/SDL.dll
    .dll windows:4 windows x86 arch:x86

    07715dfbd2fb762d2b3fd8ef4273adc9


    Headers

    Imports

    Exports

    Sections

  • isopropoxide/PayloadMBR/Programs/QEMU/bios.bin
  • isopropoxide/PayloadMBR/Programs/QEMU/libcurl-4.dll
    .dll windows:4 windows x86 arch:x86

    591bfb96218654ea9677f9b7123d0d31


    Headers

    Imports

    Exports

    Sections

  • isopropoxide/PayloadMBR/Programs/QEMU/pxe-e1000.bin
  • isopropoxide/PayloadMBR/Programs/QEMU/qemu.exe
    .exe windows:4 windows x86 arch:x86

    9334847cc8edb5e7f67fbdf914c4dd65


    Headers

    Imports

    Sections

  • isopropoxide/PayloadMBR/Programs/QEMU/vgabios-cirrus.bin
  • isopropoxide/PayloadMBR/Programs/compress.cpp
  • isopropoxide/PayloadMBR/Programs/compress.exe
    .exe windows:4 windows x86 arch:x86

    9468839a33cefa14b007ce8a0bd988e6


    Headers

    Imports

    Sections

  • isopropoxide/PayloadMBR/Programs/nasm.exe
    .exe windows:4 windows x64 arch:x64

    245fd5847db29ac01003e87f2fc0fe30


    Headers

    Imports

    Sections

  • isopropoxide/PayloadMBR/Programs/png2bin.exe
    .exe windows:5 windows x86 arch:x86

    91ae93ed3ff0d6f8a4f22d2edd30a58e


    Headers

    Imports

    Sections

  • png2bin.pyc
  • isopropoxide/PayloadMBR/Programs/png2bin.py
  • isopropoxide/PayloadMBR/Programs/png2bin.spec
  • isopropoxide/PayloadMBR/disk.img
  • isopropoxide/PayloadMBR/hamster.bmp
  • isopropoxide/Release/Isopropoxide-x86.exe
    .exe windows:5 windows x86 arch:x86

    091ad0f5cf5059384f693612c7eb7a97


    Headers

    Imports

    Sections

  • isopropoxide/Release/isopropoxide.iobj
  • isopropoxide/Release/isopropoxide.ipdb
  • isopropoxide/Release/isopropoxide.pdb
  • isopropoxide/isopropoxide.sln
  • isopropoxide/isopropoxide/Release/Resource.res
  • isopropoxide/isopropoxide/Release/isopropoxide.log
  • isopropoxide/isopropoxide/Release/isopropoxide.obj
  • isopropoxide/isopropoxide/Release/isopropoxide.tlog/CL.command.1.tlog
  • isopropoxide/isopropoxide/Release/isopropoxide.tlog/CL.read.1.tlog
  • isopropoxide/isopropoxide/Release/isopropoxide.tlog/CL.write.1.tlog
  • isopropoxide/isopropoxide/Release/isopropoxide.tlog/isopropoxide.lastbuildstate
  • isopropoxide/isopropoxide/Release/isopropoxide.tlog/link.command.1.tlog
  • isopropoxide/isopropoxide/Release/isopropoxide.tlog/link.read.1.tlog
  • isopropoxide/isopropoxide/Release/isopropoxide.tlog/link.write.1.tlog
  • isopropoxide/isopropoxide/Release/isopropoxide.tlog/rc.command.1.tlog
  • isopropoxide/isopropoxide/Release/isopropoxide.tlog/rc.read.1.tlog
  • isopropoxide/isopropoxide/Release/isopropoxide.tlog/rc.write.1.tlog
  • isopropoxide/isopropoxide/Release/vc140.pdb
  • isopropoxide/isopropoxide/Resource.aps
  • isopropoxide/isopropoxide/Resource.rc
  • isopropoxide/isopropoxide/bootrec.h
  • isopropoxide/isopropoxide/isopropoxide.cpp
  • isopropoxide/isopropoxide/isopropoxide.ico
  • isopropoxide/isopropoxide/isopropoxide.vcxproj
    .xml
  • isopropoxide/isopropoxide/isopropoxide.vcxproj.filters
  • isopropoxide/isopropoxide/isopropoxide.vcxproj.user
  • isopropoxide/isopropoxide/resource.h
  • isopropoxide/isopropoxide/x64/Release/Resource.res
  • isopropoxide/isopropoxide/x64/Release/isopropoxide.log
  • isopropoxide/isopropoxide/x64/Release/isopropoxide.obj
  • isopropoxide/isopropoxide/x64/Release/isopropoxide.tlog/CL.command.1.tlog
  • isopropoxide/isopropoxide/x64/Release/isopropoxide.tlog/CL.read.1.tlog
  • isopropoxide/isopropoxide/x64/Release/isopropoxide.tlog/CL.write.1.tlog
  • isopropoxide/isopropoxide/x64/Release/isopropoxide.tlog/isopropoxide.lastbuildstate
  • isopropoxide/isopropoxide/x64/Release/isopropoxide.tlog/link.command.1.tlog
  • isopropoxide/isopropoxide/x64/Release/isopropoxide.tlog/link.read.1.tlog
  • isopropoxide/isopropoxide/x64/Release/isopropoxide.tlog/link.write.1.tlog
  • isopropoxide/isopropoxide/x64/Release/isopropoxide.tlog/rc.command.1.tlog
  • isopropoxide/isopropoxide/x64/Release/isopropoxide.tlog/rc.read.1.tlog
  • isopropoxide/isopropoxide/x64/Release/isopropoxide.tlog/rc.write.1.tlog
  • isopropoxide/isopropoxide/x64/Release/vc140.pdb
  • isopropoxide/readme.txt
  • isopropoxide/x64/Release/Isopropoxide-x64.exe
    .exe windows:5 windows x64 arch:x64

    a9ddd4a436eb8b79090baef1a8e63c1e


    Headers

    Imports

    Sections

  • isopropoxide/x64/Release/isopropoxide.iobj
  • isopropoxide/x64/Release/isopropoxide.ipdb
  • isopropoxide/x64/Release/isopropoxide.pdb
  • Isopropoxide.exe-Malware-main/Isopropoxide.zip
    .zip
  • Isopropoxide-safety-x64.exe
    .exe windows:5 windows x64 arch:x64

    9af102b510197208482a22ce63dc3c99


    Headers

    Imports

    Sections

  • Isopropoxide-safety-x86.exe
    .exe windows:5 windows x86 arch:x86

    906f4d60c641bc2b0ddaabf2700ffb14


    Headers

    Imports

    Sections

  • Isopropoxide-x64.exe
    .exe windows:5 windows x64 arch:x64

    a9ddd4a436eb8b79090baef1a8e63c1e


    Headers

    Imports

    Sections

  • Isopropoxide-x86.exe
    .exe windows:5 windows x86 arch:x86

    091ad0f5cf5059384f693612c7eb7a97


    Headers

    Imports

    Sections

  • readme.txt
  • Isopropoxide.exe-Malware-main/README.md