General

  • Target

    fiHVkzcVYO.zip

  • Size

    5.3MB

  • MD5

    cc71a2388b6cb2678271a21d82821f8f

  • SHA1

    2047c1844ecbc25bdcfd15e0b55cdacb3f93d399

  • SHA256

    ba38f34958990f29771b388e01adbbb94c45f153197e0d4db99312b35987a376

  • SHA512

    636392894215cc99a8b2400c9d68724a2897981156e4074e86419c09d063689e18b24d82cfbc5badfced8f1d1d546990d0ccacbbe438a71c2211858a902fbf23

  • SSDEEP

    98304:mEWN4uvXgm/W5pP37MheMLQtWwV+g5DH7VtGzmXrWReGbvj9v:mfXgmOxEc0aVbbGGrubt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fiHVkzcVYO.zip
    .zip
  • aNKWvuUlwv.exe
    .exe windows:6 windows x64 arch:x64

    7df185427eb8cc51c9dd898c2c074080


    Headers

    Imports

    Sections

  • fiHVkzcVYO/aNKWvuUlwv.exe
    .exe windows:6 windows x64 arch:x64

    7df185427eb8cc51c9dd898c2c074080


    Headers

    Imports

    Sections

  • fiHVkzcVYO/autoexec/yes.lua
  • fiHVkzcVYO/autoexec/yes2.lua
    .js
  • fiHVkzcVYO/launch.cfg
  • fiHVkzcVYO/workspace/IY_FE.iy
  • fiHVkzcVYO/workspace/RoseHubSettings.txt
  • fiHVkzcVYO/workspace/dex/deps_version.dat
  • fiHVkzcVYO/workspace/dex/rbx_api.dat
  • fiHVkzcVYO/workspace/dex/rbx_rmd.dat
  • launch.cfg