Resubmissions

25/02/2024, 06:37

240225-hdt3vsef9y 3

General

  • Target

    Installation+Tutorial.ENx64WIN.zip

  • Size

    17.3MB

  • MD5

    b0b06a26b7c5aafd354ab4d7d35c957d

  • SHA1

    62ac0ae36f7b4e973c8a4203d4a7164236a73c58

  • SHA256

    d898b1f5a2348c9333a4db9818339f24c26151ad42c925a1ebf4948461d79795

  • SHA512

    12d68080cf7ccea717165f6ae35eb95ce7e5736b3e1772440b3372eb5679d5ac7abaa71039a657f949cd3121950f0a7a86691c5ff4d2d11d8b89248dd9a6e224

  • SSDEEP

    393216:/b1lLr4hokhHqfbaDwJkuq85sN5ltwFeeILnetAAC848:R6n8baDwtqvTTwF6LnetAp848

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Installation+Tutorial.ENx64WIN.zip
    .zip

    Password: 2022

  • LICENSE
  • PA$$W0RD 2022
  • Read me before you start.txt
  • Setup.exe
    .exe windows:6 windows x86 arch:x86

    Password: 2022

    47bd48aad101666476039d5dc021c38d


    Code Sign

    Headers

    Imports

    Sections

  • SetupFiles.rar
    .rar

    Password: 2022

  • LICENSE
  • Setup.exe
    .exe windows:6 windows x86 arch:x86

    Password: 2022

    47bd48aad101666476039d5dc021c38d


    Code Sign

    Headers

    Imports

    Sections

  • data/admin.db
  • data/admin.mssql
  • data/admin.pgsql
  • data/admin.sql
  • data/migrations/admin_2020_04_14_100427_ms.sql
  • data/migrations/admin_2020_04_14_100427_mysql.sql
  • data/migrations/admin_2020_04_14_100427_postgres.sql
  • data/migrations/admin_2020_04_14_100427_sqlite.sql
  • data/migrations/admin_2020_08_04_092427_ms.sql
  • data/migrations/admin_2020_08_04_092427_mysql.sql
  • data/migrations/admin_2020_08_04_092427_postgres.sql
  • data/migrations/admin_2020_08_04_092427_sqlite.sql
  • engine/WCLDll.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2022

    09f04b8a77f4345bd6d451987e784d5e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • engine/engine.go
    .js
  • engine/teazel.aspx
  • engine/vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2022

    fa315c9bc46ab41d4bc4e3f94023067f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • engine/wbxtrace.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2022

    540b0d6d53da0c8c146ee3251a675907


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • modules/Locals/am.pak
  • modules/Locals/ar.pak
  • modules/Locals/fi.pak
  • modules/Locals/fil.pak
  • modules/Locals/fr.pak
  • modules/Locals/gu.pak
  • modules/Locals/he.pak
  • modules/Locals/hi.pak
  • modules/Locals/hr.pak
  • modules/Locals/hu.pak
  • modules/Locals/id.pak
  • modules/Locals/lt.pak
  • modules/Locals/lv.pak
  • modules/auth/auth.go
  • modules/auth/auth_test.go
  • modules/auth/middleware.go
    .js
  • modules/auth/middleware_test.go
  • modules/auth/session.go
  • modules/collection/collection.go
    .js
  • modules/collection/collection_test.go
  • modules/config/config.go
    .js
  • modules/config/config.ini
  • modules/config/config.yaml
  • modules/config/config_test.go
  • modules/constant/constant.go
  • modules/db/base.go
  • modules/db/connection.go
  • modules/db/converter.go
  • modules/db/dialect/common.go
  • modules/db/dialect/dialect.go
  • modules/db/dialect/mssql.go
  • modules/db/dialect/mysql.go
  • modules/db/dialect/postgresql.go
  • modules/db/dialect/sqlite.go
  • modules/db/drivers/mssql/mssql.go
  • modules/db/drivers/mysql/mysql.go
  • modules/db/drivers/postgres/postgres.go
  • modules/db/drivers/sqlite/sqlite.go
  • modules/db/mssql.go
  • modules/db/mysql.go
  • modules/db/performer.go
    .js
  • modules/db/postgresql.go
  • modules/db/sqlite.go
  • modules/db/statement.go
  • modules/db/statement_mssql_test.go
  • modules/db/statement_mysql_test.go
  • modules/db/statement_postgresql_test.go
  • modules/db/statement_sqlite_test.go
  • modules/db/statement_test.go
  • modules/db/types.go
  • modules/db/types_test.go
  • modules/en-US/AutoWorkplaceN.dll.mui
    .dll windows:6 windows x86 arch:x86

    Password: 2022


    Headers

    Sections

  • modules/en-US/avicap32.dll.mui
    .dll windows:6 windows x86 arch:x86

    Password: 2022


    Headers

    Sections

  • modules/errors/error.go
  • modules/file/file.go
    .js
  • modules/file/local.go
  • modules/fonts/8514sys.fon
  • modules/fonts/dosapp.fon
  • modules/fonts/smalle.fon
  • modules/fonts/symbol.ttf
  • modules/fonts/trebucbd.ttf
  • modules/fonts/trebucbi.ttf
  • modules/fonts/verdana.ttf
  • modules/fonts/verdanab.ttf
  • modules/language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • modules/language/an.txt
  • modules/language/ar.txt
  • modules/language/az.txt
  • modules/language/ba.txt
  • modules/language/be.txt
  • modules/language/bg.txt
  • modules/language/bn.txt
  • modules/language/ca.txt
  • modules/language/cn.go
    .js
  • modules/language/co.txt
  • modules/language/cs.txt
  • modules/language/da.txt
  • modules/language/de.txt
  • modules/language/el.txt
  • modules/language/en.go
    .js
  • modules/language/eng.txt
  • modules/language/es.txt
  • modules/language/et.txt
  • modules/language/eu.txt
  • modules/language/ext.txt
  • modules/language/fa.txt
  • modules/language/fi.txt
  • modules/language/fr.txt
  • modules/language/fur.txt
  • modules/language/fy.txt
  • modules/language/ga.txt
  • modules/language/gl.txt
  • modules/language/gu.txt
  • modules/language/he.pak
  • modules/language/he.txt
  • modules/language/hi.pak
  • modules/language/hi.txt
  • modules/language/hr.pak
  • modules/language/hr.txt
  • modules/language/hu.pak
  • modules/language/hu.txt
  • modules/language/hy.txt
  • modules/language/id.txt
  • modules/language/is.txt
  • modules/language/it.txt
  • modules/language/ja.txt
  • modules/language/jp.go
    .js
  • modules/language/ka.txt
  • modules/language/kaa.txt
  • modules/language/kab.txt
  • modules/language/kk.txt
  • modules/language/ko.txt
  • modules/language/ku-ckb.txt
  • modules/language/ky.txt
  • modules/language/language.go
  • modules/language/language_test.go
  • modules/language/lij.txt
  • modules/language/lt.txt
  • modules/language/mk.txt
  • modules/language/mn.txt
  • modules/language/mng.txt
  • modules/language/mng2.txt
  • modules/language/mr.txt
  • modules/language/ne.txt
  • modules/language/nl.txt
  • modules/language/pa-in.txt
  • modules/language/pl.txt
  • modules/language/ps.txt
  • modules/language/pt-BR.go
    .js
  • modules/language/pt-br.txt
  • modules/language/pt.txt
  • modules/language/ro.txt
  • modules/language/ru.txt
  • modules/language/sa.txt
  • modules/language/si.txt
  • modules/language/sk.txt
  • modules/language/sl.txt
  • modules/language/sr-spc.txt
  • modules/language/sr-spl.txt
  • modules/language/sv.txt
  • modules/language/sw.txt
  • modules/language/ta.txt
  • modules/language/tc.go
    .js
  • modules/language/tg.txt
  • modules/language/th.txt
  • modules/language/tk.txt
  • modules/language/tr.txt
  • modules/language/tt.txt
  • modules/language/ug.txt
  • modules/language/uk.txt
  • modules/language/uz-cyrl.txt
  • modules/language/uz.txt
  • modules/language/va.txt
  • modules/language/vi.txt
  • modules/language/yo.txt
  • modules/language/zh-cn.txt
  • modules/language/zh-tw.txt
  • modules/logger/logger.go
  • modules/logger/logger_test.go
  • modules/menu/menu.go
    .js
  • modules/menu/menu_test.go
  • modules/page/page.go
  • modules/remote_server/remote_server.go
  • modules/service/service.go
  • modules/system/application.go
  • modules/system/version.go
    .js
  • modules/ui/ui.go
  • modules/utils/utils.go
  • modules/utils/utils_test.go
  • msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    c6ca052e00ae17bd34817e5c66c25980


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/admin/admin.go
  • plugins/admin/controller/Update.go
  • plugins/admin/controller/api_create.go
  • plugins/admin/controller/api_detail.go
    .js
  • plugins/admin/controller/api_list.go
  • plugins/admin/controller/api_update.go
  • plugins/admin/controller/auth.go
  • plugins/admin/controller/common.go
  • plugins/admin/controller/common_test.go
  • plugins/admin/controller/delete.go
  • plugins/admin/controller/detail.go
    .js
  • plugins/admin/controller/edit.go
    .js
  • plugins/admin/controller/handler.go
  • plugins/admin/controller/install.go
  • plugins/admin/controller/menu.go
  • plugins/admin/controller/new.go
    .js
  • plugins/admin/controller/operation.go
  • plugins/admin/controller/plugins.go
  • plugins/admin/controller/plugins_tmpl.go
    .js
  • plugins/admin/controller/show.go
    .js
  • plugins/admin/controller/system.go
  • plugins/admin/data/mysql/admin.sql
  • plugins/admin/data/sqlite/admin.db
  • plugins/admin/models/base.go
  • plugins/admin/models/menu.go
  • plugins/admin/models/operation_log.go
  • plugins/admin/models/permission.go
  • plugins/admin/models/role.go
  • plugins/admin/models/site.go
    .js
  • plugins/admin/models/user.go
    .js
  • plugins/admin/modules/captcha/captcha.go
  • plugins/admin/modules/constant/constant.go
  • plugins/admin/modules/form/form.go
    .js
  • plugins/admin/modules/guard/delete.go
  • plugins/admin/modules/guard/edit.go
  • plugins/admin/modules/guard/export.go
  • plugins/admin/modules/guard/guard.go
  • plugins/admin/modules/guard/menu_delete.go
  • plugins/admin/modules/guard/menu_edit.go
  • plugins/admin/modules/guard/menu_new.go
  • plugins/admin/modules/guard/new.go
  • plugins/admin/modules/guard/server_login.go
  • plugins/admin/modules/guard/update.go
  • plugins/admin/modules/helper.go
  • plugins/admin/modules/helper_test.go
  • plugins/admin/modules/paginator/paginator.go
  • plugins/admin/modules/paginator/paginator_test.go
  • plugins/admin/modules/parameter/parameter.go
    .js
  • plugins/admin/modules/parameter/parameter_test.go
  • plugins/admin/modules/response/response.go
    .js
  • plugins/admin/modules/table/config.go
  • plugins/admin/modules/table/default.go
    .js
  • plugins/admin/modules/table/default_test.go
  • plugins/admin/modules/table/generators.go
    .js
  • plugins/admin/modules/table/table.go
  • plugins/admin/modules/table/tmpl.go
    .js
  • plugins/admin/modules/table/tmpl/choose_table_ajax.tmpl
    .js
  • plugins/admin/modules/table/tmpl/generator.tmpl
    .js
  • plugins/admin/modules/tools/generator.go
    .js
  • plugins/admin/modules/tools/template.go
  • plugins/admin/router.go
  • plugins/example/controller.go
  • plugins/example/example.go
  • plugins/example/go_plugin/Makefile
  • plugins/example/go_plugin/main.go
  • plugins/example/router.go
  • plugins/plugins.go
    .js
  • plugins/plugins_test.go
  • ptMgr.dll
    .dll windows:6 windows x86 arch:x86

    37b4b73bad2a803a7fcbbe9cde204fe0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ptusredt.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    9c892fc79d438f0bdaf725d5688d03ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • rhizome.xlsx
  • data/admin.db
  • data/admin.mssql
  • data/admin.pgsql
  • data/admin.sql
  • data/migrations/admin_2020_04_14_100427_ms.sql
  • data/migrations/admin_2020_04_14_100427_mysql.sql
  • data/migrations/admin_2020_04_14_100427_postgres.sql
  • data/migrations/admin_2020_04_14_100427_sqlite.sql
  • data/migrations/admin_2020_08_04_092427_ms.sql
  • data/migrations/admin_2020_08_04_092427_mysql.sql
  • data/migrations/admin_2020_08_04_092427_postgres.sql
  • data/migrations/admin_2020_08_04_092427_sqlite.sql
  • engine/WCLDll.dll
    .dll windows:6 windows x86 arch:x86

    09f04b8a77f4345bd6d451987e784d5e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • engine/engine.go
    .js
  • engine/teazel.aspx
  • engine/vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    fa315c9bc46ab41d4bc4e3f94023067f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • engine/wbxtrace.dll
    .dll windows:6 windows x86 arch:x86

    540b0d6d53da0c8c146ee3251a675907


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • modules/Locals/am.pak
  • modules/Locals/ar.pak
  • modules/Locals/fi.pak
  • modules/Locals/fil.pak
  • modules/Locals/fr.pak
  • modules/Locals/gu.pak
  • modules/Locals/he.pak
  • modules/Locals/hi.pak
  • modules/Locals/hr.pak
  • modules/Locals/hu.pak
  • modules/Locals/id.pak
  • modules/Locals/lt.pak
  • modules/Locals/lv.pak
  • modules/auth/auth.go
  • modules/auth/auth_test.go
  • modules/auth/middleware.go
    .js
  • modules/auth/middleware_test.go
  • modules/auth/session.go
  • modules/collection/collection.go
    .js
  • modules/collection/collection_test.go
  • modules/config/config.go
    .js
  • modules/config/config.ini
  • modules/config/config.yaml
  • modules/config/config_test.go
  • modules/constant/constant.go
  • modules/db/base.go
  • modules/db/connection.go
  • modules/db/converter.go
  • modules/db/dialect/common.go
  • modules/db/dialect/dialect.go
  • modules/db/dialect/mssql.go
  • modules/db/dialect/mysql.go
  • modules/db/dialect/postgresql.go
  • modules/db/dialect/sqlite.go
  • modules/db/drivers/mssql/mssql.go
  • modules/db/drivers/mysql/mysql.go
  • modules/db/drivers/postgres/postgres.go
  • modules/db/drivers/sqlite/sqlite.go
  • modules/db/mssql.go
  • modules/db/mysql.go
  • modules/db/performer.go
    .js
  • modules/db/postgresql.go
  • modules/db/sqlite.go
  • modules/db/statement.go
  • modules/db/statement_mssql_test.go
  • modules/db/statement_mysql_test.go
  • modules/db/statement_postgresql_test.go
  • modules/db/statement_sqlite_test.go
  • modules/db/statement_test.go
  • modules/db/types.go
  • modules/db/types_test.go
  • modules/en-US/AutoWorkplaceN.dll.mui
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • modules/en-US/avicap32.dll.mui
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • modules/errors/error.go
  • modules/file/file.go
    .js
  • modules/file/local.go
  • modules/fonts/8514sys.fon
  • modules/fonts/dosapp.fon
  • modules/fonts/smalle.fon
  • modules/fonts/symbol.ttf
  • modules/fonts/trebucbd.ttf
  • modules/fonts/trebucbi.ttf
  • modules/fonts/verdana.ttf
  • modules/fonts/verdanab.ttf
  • modules/language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • modules/language/an.txt
  • modules/language/ar.txt
  • modules/language/az.txt
  • modules/language/ba.txt
  • modules/language/be.txt
  • modules/language/bg.txt
  • modules/language/bn.txt
  • modules/language/ca.txt
  • modules/language/cn.go
    .js
  • modules/language/co.txt
  • modules/language/cs.txt
  • modules/language/da.txt
  • modules/language/de.txt
  • modules/language/el.txt
  • modules/language/en.go
    .js
  • modules/language/eng.txt
  • modules/language/es.txt
  • modules/language/et.txt
  • modules/language/eu.txt
  • modules/language/ext.txt
  • modules/language/fa.txt
  • modules/language/fi.txt
  • modules/language/fr.txt
  • modules/language/fur.txt
  • modules/language/fy.txt
  • modules/language/ga.txt
  • modules/language/gl.txt
  • modules/language/gu.txt
  • modules/language/he.pak
  • modules/language/he.txt
  • modules/language/hi.pak
  • modules/language/hi.txt
  • modules/language/hr.pak
  • modules/language/hr.txt
  • modules/language/hu.pak
  • modules/language/hu.txt
  • modules/language/hy.txt
  • modules/language/id.txt
  • modules/language/is.txt
  • modules/language/it.txt
  • modules/language/ja.txt
  • modules/language/jp.go
    .js
  • modules/language/ka.txt
  • modules/language/kaa.txt
  • modules/language/kab.txt
  • modules/language/kk.txt
  • modules/language/ko.txt
  • modules/language/ku-ckb.txt
  • modules/language/ky.txt
  • modules/language/language.go
  • modules/language/language_test.go
  • modules/language/lij.txt
  • modules/language/lt.txt
  • modules/language/mk.txt
  • modules/language/mn.txt
  • modules/language/mng.txt
  • modules/language/mng2.txt
  • modules/language/mr.txt
  • modules/language/ne.txt
  • modules/language/nl.txt
  • modules/language/pa-in.txt
  • modules/language/pl.txt
  • modules/language/ps.txt
  • modules/language/pt-BR.go
    .js
  • modules/language/pt-br.txt
  • modules/language/pt.txt
  • modules/language/ro.txt
  • modules/language/ru.txt
  • modules/language/sa.txt
  • modules/language/si.txt
  • modules/language/sk.txt
  • modules/language/sl.txt
  • modules/language/sr-spc.txt
  • modules/language/sr-spl.txt
  • modules/language/sv.txt
  • modules/language/sw.txt
  • modules/language/ta.txt
  • modules/language/tc.go
    .js
  • modules/language/tg.txt
  • modules/language/th.txt
  • modules/language/tk.txt
  • modules/language/tr.txt
  • modules/language/tt.txt
  • modules/language/ug.txt
  • modules/language/uk.txt
  • modules/language/uz-cyrl.txt
  • modules/language/uz.txt
  • modules/language/va.txt
  • modules/language/vi.txt
  • modules/language/yo.txt
  • modules/language/zh-cn.txt
  • modules/language/zh-tw.txt
  • modules/logger/logger.go
  • modules/logger/logger_test.go
  • modules/menu/menu.go
    .js
  • modules/menu/menu_test.go
  • modules/page/page.go
  • modules/remote_server/remote_server.go
  • modules/service/service.go
  • modules/system/application.go
  • modules/system/version.go
    .js
  • modules/ui/ui.go
  • modules/utils/utils.go
  • modules/utils/utils_test.go
  • msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    c6ca052e00ae17bd34817e5c66c25980


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/admin/admin.go
  • plugins/admin/controller/Update.go
  • plugins/admin/controller/api_create.go
  • plugins/admin/controller/api_detail.go
    .js
  • plugins/admin/controller/api_list.go
  • plugins/admin/controller/api_update.go
  • plugins/admin/controller/auth.go
  • plugins/admin/controller/common.go
  • plugins/admin/controller/common_test.go
  • plugins/admin/controller/delete.go
  • plugins/admin/controller/detail.go
    .js
  • plugins/admin/controller/edit.go
    .js
  • plugins/admin/controller/handler.go
  • plugins/admin/controller/install.go
  • plugins/admin/controller/menu.go
  • plugins/admin/controller/new.go
    .js
  • plugins/admin/controller/operation.go
  • plugins/admin/controller/plugins.go
  • plugins/admin/controller/plugins_tmpl.go
    .js
  • plugins/admin/controller/show.go
    .js
  • plugins/admin/controller/system.go
  • plugins/admin/data/mysql/admin.sql
  • plugins/admin/data/sqlite/admin.db
  • plugins/admin/models/base.go
  • plugins/admin/models/menu.go
  • plugins/admin/models/operation_log.go
  • plugins/admin/models/permission.go
  • plugins/admin/models/role.go
  • plugins/admin/models/site.go
    .js
  • plugins/admin/models/user.go
    .js
  • plugins/admin/modules/captcha/captcha.go
  • plugins/admin/modules/constant/constant.go
  • plugins/admin/modules/form/form.go
    .js
  • plugins/admin/modules/guard/delete.go
  • plugins/admin/modules/guard/edit.go
  • plugins/admin/modules/guard/export.go
  • plugins/admin/modules/guard/guard.go
  • plugins/admin/modules/guard/menu_delete.go
  • plugins/admin/modules/guard/menu_edit.go
  • plugins/admin/modules/guard/menu_new.go
  • plugins/admin/modules/guard/new.go
  • plugins/admin/modules/guard/server_login.go
  • plugins/admin/modules/guard/update.go
  • plugins/admin/modules/helper.go
  • plugins/admin/modules/helper_test.go
  • plugins/admin/modules/paginator/paginator.go
  • plugins/admin/modules/paginator/paginator_test.go
  • plugins/admin/modules/parameter/parameter.go
    .js
  • plugins/admin/modules/parameter/parameter_test.go
  • plugins/admin/modules/response/response.go
    .js
  • plugins/admin/modules/table/config.go
  • plugins/admin/modules/table/default.go
    .js
  • plugins/admin/modules/table/default_test.go
  • plugins/admin/modules/table/generators.go
    .js
  • plugins/admin/modules/table/table.go
  • plugins/admin/modules/table/tmpl.go
    .js
  • plugins/admin/modules/table/tmpl/choose_table_ajax.tmpl
    .js
  • plugins/admin/modules/table/tmpl/generator.tmpl
    .js
  • plugins/admin/modules/tools/generator.go
    .js
  • plugins/admin/modules/tools/template.go
  • plugins/admin/router.go
  • plugins/example/controller.go
  • plugins/example/example.go
  • plugins/example/go_plugin/Makefile
  • plugins/example/go_plugin/main.go
  • plugins/example/router.go
  • plugins/plugins.go
    .js
  • plugins/plugins_test.go
  • ptMgr.dll
    .dll windows:6 windows x86 arch:x86

    37b4b73bad2a803a7fcbbe9cde204fe0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ptusredt.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    9c892fc79d438f0bdaf725d5688d03ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • rhizome.xlsx