General

  • Target

    New folder.7zip.zip

  • Size

    5.1MB

  • MD5

    efee11e15bf1eed205143e0e679a95c2

  • SHA1

    3947d9806db883b3094406140abe151310ff8236

  • SHA256

    bf7f0c1917d75a93119ff72a220b3ec5312df35c7ff5bb1bea8ec23931e3a231

  • SHA512

    2ed1facf2ffec6e6cf0010e236cf54ccdce6e1acab05060ef18a3d09cffd0eb3b8d82187ae3b7cd546c3c39c78e5e677b0c416f464580ad5eb2aed704c56ecd5

  • SSDEEP

    98304:W6gwYcbpjGQRV7AokydvD6sKd9O8tWCERryhPGX/3WCzmBOWcwAIkND:W6gwXpKYBLdbBQ9NtL++s/WCzc9cNIiD

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New folder.7zip.zip
    .zip
  • New folder/2.exe
    .exe windows:6 windows x64 arch:x64

    54138ed0901a1726ae3658e18bdd1115


    Headers

    Imports

    Exports

    Sections

  • New folder/DVLPERMDRV.SYS
    .sys windows:6 windows x64 arch:x64

    b05ee5c816a30bc52378c759486af0b9


    Code Sign

    Headers

    Imports

    Sections