Resubmissions

08-02-2024 19:42

240208-ye7cksbg28 10

08-02-2024 19:33

240208-x9kavshh6s 10

General

  • Target

    Korepi.rar

  • Size

    22.4MB

  • MD5

    ecb834d94edbee6f13e0851fa6caf1f4

  • SHA1

    3212af8c23e6c19ef53b6b7d711397676b508e26

  • SHA256

    3343644e85fc33f8cd3b97e0f7275053f1c272932379c61b3c0d3c620a23a4ee

  • SHA512

    12e31a8d653f68c5b4af69b9f20622923fd1f28ea414e5dcdc2be373f5a4fcc860f01fafee3b11dca018568c3f602ad1d484c3c19c050ef5348d1c0bb6091254

  • SSDEEP

    393216:daXr/gp4rHPuszFA5Hj/9/gp4rWcQQtwvxPCsWQQs/uszDq2Z/SE/Mb4KZnJsQwJ:di/gp6HHijV/gp6WVQGhW3stzZREb4Qq

Score
10/10

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1204820036871651418/CUplXl5h8mK8wayRD4L98BI20GJlZ7pUqazPKIFG3k71PQZAQLEztS-LsGq873wkB2Tf

Signatures

  • 44caliber family
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Korepi.rar
    .rar
  • Korepi/Korepi.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Korepi/chrome_100_percent.pak
  • Korepi/chrome_200_percent.pak
  • Korepi/config/config.config
    .xml
  • Korepi/config/resources.pdb
  • Korepi/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    185ce3a45c3a9cfb3bf83afd7f79c140


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Korepi/d4dcompiler.config
    .xml
  • Korepi/dll/ffmpeg.dll
    .dll windows:5 windows x86 arch:x86

    c7497313062f9c96c83518b36f70731f


    Headers

    Imports

    Exports

    Sections

  • Korepi/dll/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    14cd5ffd5d2a5e20eb8ffa21377b813a


    Headers

    Imports

    Exports

    Sections

  • Korepi/dll/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    b30b9c8cc35fba1b1d1b357c770d7174


    Headers

    Imports

    Exports

    Sections

  • Korepi/dll/vk_swiftshader.dll
    .dll windows:5 windows x86 arch:x86

    bd2d4717eeba91c1b9bf3fe06ddeb87b


    Headers

    Imports

    Exports

    Sections

  • Korepi/dll/vk_swiftshader_icd.json
  • Korepi/dll/vulkan-1.dll
    .dll windows:5 windows x86 arch:x86

    0c3e803dd8e326c1278d7872e609b579


    Headers

    Imports

    Exports

    Sections

  • Korepi/ffmpeg.dll
    .dll windows:5 windows x86 arch:x86

    c7497313062f9c96c83518b36f70731f


    Headers

    Imports

    Exports

    Sections

  • Korepi/icudtl.dat
  • Korepi/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    14cd5ffd5d2a5e20eb8ffa21377b813a


    Headers

    Imports

    Exports

    Sections

  • Korepi/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    b30b9c8cc35fba1b1d1b357c770d7174


    Headers

    Imports

    Exports

    Sections

  • Korepi/system.yaml
  • Korepi/systemlibegl.pdb
  • Korepi/vgrl.dll
    .dll windows:6 windows x86 arch:x86

    25e771750b46c59ebd6e1832c28730de


    Code Sign

    Headers

    Imports

    Sections

  • Korepi/vivoxsdk.dll
    .dll windows:6 windows x86 arch:x86

    f7211e0bd2978835500c507816576a7e


    Code Sign

    Headers

    Imports

    Exports

    Sections