General

  • Target

    Release.rar

  • Size

    4.1MB

  • MD5

    ab017b9fed8a97b70b0268c2411dc9b2

  • SHA1

    adbfe4dbc4814e224eb759d49d544fb09528fe18

  • SHA256

    10b09a531c7fc1c2b800660116f767de4bc6e14717032f1b82d507d45689a06a

  • SHA512

    5f3c641cfcc05b0e58dd5c90b7ed463a9bd7143e3a18d23313f7974f19abd3b89cb45a7395265ba7ea83679777982f1414a1898663379cf2cc288f0ccc6a9b81

  • SSDEEP

    98304:MyHTEhRUEXzrxSiEivyijv6hRBdHgl3fHIoFt/z:FoUEXEFijj+RPgpfHft/z

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Release.rar
    .rar
  • Release/driver.sys
    .sys windows:10 windows x64 arch:x64

    48aab8b485505e39221c6ac40909a9cb


    Headers

    Imports

    Sections

  • Release/mapper.exe
    .exe windows:6 windows x64 arch:x64

    afc1f930b16856804326528e39e42dd5


    Headers

    Imports

    Sections

  • Release/yuki.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections