General

  • Target

    Your File Is Ready To Download.iso.7z

  • Size

    121.1MB

  • MD5

    1e8bcaf358c086edb35822632f541aac

  • SHA1

    05c3c221c4b75ce2b2440d601788c8a73870bbcf

  • SHA256

    dbe52f6c7c7202db052f13e9797e28d104a435ed695e49c83faaf25370236073

  • SHA512

    3ee5637a3ac19fe1010f97f4cd092842b6d7574ab18448e074b79bad2f6e5a1bf3812cf7852f8c2ff9e9286c0146d0faaac57ed648fc1ae710633a043f60a268

  • SSDEEP

    1572864:dFedyZYDRfn0z1Nw7QuefyOa8ap+eYxdCiMB3hhJcijiOFKs2RfJbbGWSR2SvcgM:fJZiRf6zw3K+j6EiaxhKBbS/R2I

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Your File Is Ready To Download.iso.7z
    .7z

    Password: infected

  • Your File Is Ready To Download.iso
    .iso

    Password: infected

  • Install.lnk
    .lnk
  • app.zip
    .zip

    Password: infected

  • Tone/Tone.exe
    .exe windows:5 windows x64 arch:x64

    Password: infected

    d75a6917dd41b6164f0b6788ef978211


    Headers

    Imports

    Exports

    Sections

  • Tone/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    Password: infected

    36f6d7806085bd3a70ed8c5dcb51f6c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Tone/ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    0eaa4fb68ca1c02091ee00c3c6316abd


    Headers

    Imports

    Exports

    Sections

  • Tone/icudtl.dat
  • Tone/imgs/icon.ico
  • Tone/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    b7d07fba9927b6b4247e86eea7632776


    Headers

    Imports

    Exports

    Sections

  • Tone/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    Password: infected

    c54faf0fba825e7f8ac6d2a8308136b4


    Headers

    Imports

    Exports

    Sections

  • Tone/locales/am.pak
  • Tone/locales/ar.pak
  • Tone/locales/bg.pak
  • Tone/locales/bn.pak
  • Tone/locales/ca.pak
  • Tone/locales/cs.pak
  • Tone/locales/da.pak
  • Tone/locales/de.pak
  • Tone/locales/el.pak
  • Tone/locales/en-GB.pak
  • Tone/locales/en-US.pak
  • Tone/locales/es-419.pak
  • Tone/locales/es.pak
  • Tone/locales/et.pak
  • Tone/locales/fa.pak
  • Tone/locales/fi.pak
  • Tone/locales/fil.pak
  • Tone/locales/fr.pak
  • Tone/locales/gu.pak
  • Tone/locales/he.pak
  • Tone/locales/hi.pak
  • Tone/locales/hr.pak
  • Tone/locales/hu.pak
  • Tone/locales/id.pak
  • Tone/locales/it.pak
  • Tone/locales/ja.pak
  • Tone/locales/kn.pak
  • Tone/locales/ko.pak
  • Tone/locales/lt.pak
  • Tone/locales/lv.pak
  • Tone/locales/ml.pak
  • Tone/locales/mr.pak
  • Tone/locales/ms.pak
  • Tone/locales/nb.pak
  • Tone/locales/nl.pak
  • Tone/locales/pl.pak
  • Tone/locales/pt-BR.pak
  • Tone/locales/pt-PT.pak
  • Tone/locales/ro.pak
  • Tone/locales/ru.pak
  • Tone/locales/sk.pak
  • Tone/locales/sl.pak
  • Tone/locales/sr.pak
  • Tone/locales/sv.pak
  • Tone/locales/sw.pak
  • Tone/locales/ta.pak
  • Tone/locales/te.pak
  • Tone/locales/th.pak
  • Tone/locales/tr.pak
  • Tone/locales/uk.pak
  • Tone/locales/vi.pak
  • Tone/locales/zh-CN.pak
  • Tone/locales/zh-TW.pak
  • Tone/node.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    5e43c6b73ff04afc5d7f0f6d4b0c08f8


    Headers

    Imports

    Exports

    Sections

  • Tone/nw.dll
    .dll windows:5 windows x64 arch:x64

    02d57c47eb08850bbb7853ec0cabbc84


    Headers

    Imports

    Exports

    Sections

  • Tone/nw_100_percent.pak
  • Tone/nw_200_percent.pak
  • Tone/nw_elf.dll
    .dll windows:5 windows x64 arch:x64

    e0bcc9367a58d352b395cb784d55369c


    Headers

    Imports

    Exports

    Sections

  • Tone/resources.pak
  • Tone/v8_context_snapshot.bin
  • icon.ico
  • resources.bat