General

  • Target

    Spoofer_futuregg_1.zip

  • Size

    17.6MB

  • MD5

    1e0f2d11e767c304ca9232a1a262bb7f

  • SHA1

    63860d52a416820e7dc941e6362d9a7398738c15

  • SHA256

    fca7c6d081b9bbb7c35c8e28c4ba276763e64a871d83ba6e3b85ba7c9a3b7e0e

  • SHA512

    127f7e59de0cc07ecbccf423c5fe8a998194346224147d69fea9b7c9cd21a9ad0d60ed2a01affe126dfb2baac103e0bcf7a8d163f67823ed8ff76514e898f608

  • SSDEEP

    393216:Q5xPNZosXU9gHVCMtjTA6X3haPwnpidZHRaNGV3FskyAbMOen/1:Q/bosXUuVLZnhaPiid9RaNqekkOy/1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Spoofer_futuregg_1.zip
    .zip

    Password: infected

  • Spoofer futuregg/Efi shell/AMIDEEFIx64.efi
    .dll windows:0 windows x64 arch:x64

    Password: infected


    Headers

    Sections

  • Spoofer futuregg/Efi shell/AfuEfix64.efi
    .dll windows:0 windows x64 arch:x64

    Password: infected


    Headers

    Sections

  • Spoofer futuregg/Efi shell/ChgLogo.efi
    .dll windows:0 windows x64 arch:x64

    Password: infected


    Headers

    Sections

  • Spoofer futuregg/Efi shell/Compress.efi
    .dll windows:0 windows x64 arch:x64

    Password: infected


    Headers

    Sections

  • Spoofer futuregg/Efi shell/efi/boot/bootx64.efi
    .dll windows:0 windows x64 arch:x64

    Password: infected


    Headers

    Sections

  • Spoofer futuregg/Efi shell/flash2.efi
    .dll windows:0 windows x64 arch:x64

    Password: infected


    Headers

    Sections

  • Spoofer futuregg/Efi shell/id.nsh
  • Spoofer futuregg/Efi shell/imageM2C.ROM
  • Spoofer futuregg/Efi shell/logo.nsh
    .vbs
  • Spoofer futuregg/Efi shell/startup.nsh
  • Spoofer futuregg/HWID Checker.bat
  • Spoofer futuregg/HWID spoof/AMIDEWINx64.EXE
    .exe windows:6 windows x64 arch:x64

    Password: infected

    272dae991c0311688a7a20faa5468b8e


    Headers

    Imports

    Sections

  • Spoofer futuregg/HWID spoof/Command Prompt.lnk
    .lnk
  • Spoofer futuregg/HWID spoof/amifldrv64.sys
    .sys windows:6 windows x64 arch:x64

    b05ee5c816a30bc52378c759486af0b9


    Code Sign

    Headers

    Imports

    Sections

  • Spoofer futuregg/HWID spoof/desktop.ini
  • Spoofer futuregg/mw cleaner.bat
    .bat .vbs