General

  • Target

    publish.zip

  • Size

    2.6MB

  • MD5

    5812b248960073bdadf2d1e2c58b09ee

  • SHA1

    33363cf23c7f61000e289abcbe96bb0ca5db460a

  • SHA256

    0893ce7e0aca3755d6a470976079cbb054ccf24276a62e8e7cdedcf974cc6684

  • SHA512

    b593cabe1cceffdad50fbd6bef54df80e06e385a2136a63df319bf7438f8cdfc20574912f0ad890209c5c48a6a7f823816df254fd72e1e64bd7dadcd22f2a0f5

  • SSDEEP

    49152:QxRfmzRUKwfOJka2UP3HQe1Idnk+p1Rzxfs3POWKURmh80cXwgJhzsoQFSsc:OmmKpCah1AnxB0POn80cggfzJESsc

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • publish.zip
    .zip
  • publish/Microsoft.CSharp.dll
  • publish/Microsoft.DiaSymReader.Native.amd64.dll
  • publish/Microsoft.VisualBasic.Core.dll
  • publish/Microsoft.VisualBasic.dll
  • publish/Microsoft.Win32.Primitives.dll
  • publish/Microsoft.Win32.Registry.dll
  • publish/System.AppContext.dll
  • publish/System.Buffers.dll
  • publish/System.Collections.Concurrent.dll
  • publish/System.Collections.Immutable.dll
  • publish/System.Collections.NonGeneric.dll
  • publish/System.Collections.Specialized.dll
  • publish/System.Collections.dll
  • publish/System.ComponentModel.Annotations.dll
  • publish/System.ComponentModel.DataAnnotations.dll
  • publish/System.ComponentModel.EventBasedAsync.dll
  • publish/System.ComponentModel.Primitives.dll
  • publish/System.ComponentModel.TypeConverter.dll
  • publish/System.ComponentModel.dll
  • publish/System.Configuration.dll
  • publish/System.Console.dll
  • publish/System.Core.dll
  • publish/System.Data.Common.dll
  • publish/System.Data.DataSetExtensions.dll
  • publish/System.Data.dll
  • publish/System.Diagnostics.Contracts.dll
  • publish/System.Diagnostics.Debug.dll
  • publish/System.Diagnostics.DiagnosticSource.dll
  • publish/System.Diagnostics.FileVersionInfo.dll
  • publish/System.Diagnostics.Process.dll
  • publish/System.Diagnostics.StackTrace.dll
  • publish/System.Diagnostics.TextWriterTraceListener.dll
  • publish/System.Diagnostics.Tools.dll
  • publish/System.Diagnostics.TraceSource.dll
  • publish/System.Diagnostics.Tracing.dll
  • publish/System.Drawing.Primitives.dll
  • publish/System.Drawing.dll
  • publish/System.Dynamic.Runtime.dll
  • publish/System.Formats.Asn1.dll
  • publish/System.Formats.Tar.dll
  • publish/System.Globalization.Calendars.dll
  • publish/System.Globalization.Extensions.dll
  • publish/System.Globalization.dll
  • publish/System.IO.Compression.Brotli.dll
  • publish/System.IO.Compression.FileSystem.dll
  • publish/System.IO.Compression.Native.dll
  • publish/System.IO.Compression.ZipFile.dll
  • publish/System.IO.Compression.dll
  • publish/System.IO.FileSystem.AccessControl.dll
  • publish/System.IO.FileSystem.DriveInfo.dll
  • publish/System.IO.FileSystem.Primitives.dll
  • publish/System.IO.FileSystem.Watcher.dll
  • publish/System.IO.FileSystem.dll
  • publish/System.IO.IsolatedStorage.dll
  • publish/System.IO.MemoryMappedFiles.dll
  • publish/System.IO.Pipes.AccessControl.dll
  • publish/System.IO.Pipes.dll
  • publish/System.IO.UnmanagedMemoryStream.dll
  • publish/System.IO.dll
  • publish/System.Linq.Expressions.dll
  • publish/System.Linq.Parallel.dll
  • publish/System.Linq.Queryable.dll
  • publish/System.Linq.dll
  • publish/System.Memory.dll
  • publish/System.Net.Http.Json.dll
  • publish/System.Net.Http.dll
  • publish/System.Net.HttpListener.dll
  • publish/System.Net.Mail.dll
  • publish/System.Net.NameResolution.dll
  • publish/System.Net.NetworkInformation.dll
  • publish/System.Net.Ping.dll
  • publish/System.Net.Primitives.dll
  • publish/System.Net.Quic.dll
  • publish/System.Net.Requests.dll
  • publish/System.Net.Security.dll
  • publish/System.Net.ServicePoint.dll
  • publish/System.Net.Sockets.dll
  • publish/System.Net.WebClient.dll
  • publish/System.Net.WebHeaderCollection.dll
  • publish/System.Net.WebProxy.dll
  • publish/System.Net.WebSockets.Client.dll
  • publish/System.Net.WebSockets.dll
  • publish/System.Net.dll
  • publish/System.Numerics.Vectors.dll
  • publish/System.Numerics.dll
  • publish/System.ObjectModel.dll
  • publish/System.Private.CoreLib.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • publish/System.Private.DataContractSerialization.dll
  • publish/System.Private.Uri.dll
  • publish/System.Private.Xml.Linq.dll
  • publish/System.Private.Xml.dll
  • publish/System.Reflection.DispatchProxy.dll
  • publish/System.Reflection.Emit.ILGeneration.dll
  • publish/System.Reflection.Emit.Lightweight.dll
  • publish/System.Reflection.Emit.dll
  • publish/System.Reflection.Extensions.dll
  • publish/System.Reflection.Metadata.dll
  • publish/System.Reflection.Primitives.dll
  • publish/System.Reflection.TypeExtensions.dll
  • publish/System.Reflection.dll
  • publish/System.Resources.Reader.dll
  • publish/System.Resources.ResourceManager.dll
  • publish/System.Resources.Writer.dll
  • publish/System.Runtime.CompilerServices.Unsafe.dll
  • publish/System.Runtime.CompilerServices.VisualC.dll
  • publish/System.Runtime.Extensions.dll
  • publish/System.Runtime.Handles.dll
  • publish/System.Runtime.InteropServices.JavaScript.dll
  • publish/System.Runtime.InteropServices.RuntimeInformation.dll
  • publish/System.Runtime.InteropServices.dll
  • publish/System.Runtime.Intrinsics.dll
  • publish/System.Runtime.Loader.dll
  • publish/System.Runtime.Numerics.dll
  • publish/System.Runtime.Serialization.Formatters.dll
  • publish/System.Runtime.Serialization.Json.dll
  • publish/System.Runtime.Serialization.Primitives.dll
  • publish/System.Runtime.Serialization.Xml.dll
  • publish/System.Runtime.Serialization.dll
  • publish/System.Runtime.dll
  • publish/System.Security.AccessControl.dll
  • publish/System.Security.Claims.dll
  • publish/System.Security.Cryptography.Algorithms.dll
  • publish/System.Security.Cryptography.Cng.dll
  • publish/System.Security.Cryptography.Csp.dll
  • publish/System.Security.Cryptography.Encoding.dll
  • publish/System.Security.Cryptography.OpenSsl.dll
  • publish/System.Security.Cryptography.Primitives.dll
  • publish/System.Security.Cryptography.X509Certificates.dll
  • publish/System.Security.Cryptography.dll
  • publish/System.Security.Principal.Windows.dll
  • publish/System.Security.Principal.dll
  • publish/System.Security.SecureString.dll
  • publish/System.Security.dll
  • publish/System.ServiceModel.Web.dll
  • publish/System.ServiceProcess.dll
  • publish/System.Text.Encoding.CodePages.dll
  • publish/System.Text.Encoding.Extensions.dll
  • publish/System.Text.Encoding.dll
  • publish/System.Text.Encodings.Web.dll
  • publish/System.Text.Json.dll
  • publish/System.Text.RegularExpressions.dll
  • publish/System.Threading.Channels.dll
  • publish/System.Threading.Overlapped.dll
  • publish/System.Threading.Tasks.Dataflow.dll
  • publish/System.Threading.Tasks.Extensions.dll
  • publish/System.Threading.Tasks.Parallel.dll
  • publish/System.Threading.Tasks.dll
  • publish/System.Threading.Thread.dll
  • publish/System.Threading.ThreadPool.dll
  • publish/System.Threading.Timer.dll
  • publish/System.Threading.dll
  • publish/System.Transactions.Local.dll
  • publish/System.Transactions.dll
  • publish/System.ValueTuple.dll
  • publish/System.Web.HttpUtility.dll
  • publish/System.Web.dll
  • publish/System.Windows.dll
  • publish/System.Xml.Linq.dll
  • publish/System.Xml.ReaderWriter.dll
  • publish/System.Xml.Serialization.dll
  • publish/System.Xml.XDocument.dll
  • publish/System.Xml.XPath.XDocument.dll
  • publish/System.Xml.XPath.dll
  • publish/System.Xml.XmlDocument.dll
  • publish/System.Xml.XmlSerializer.dll
  • publish/System.Xml.dll
  • publish/System.dll
  • publish/TheGame.deps.json
  • publish/TheGame.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • publish/TheGame.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • publish/TheGame.pdb
  • publish/TheGame.runtimeconfig.json
  • publish/WindowsBase.dll
  • publish/clretwrc.dll
  • publish/clrgc.dll
  • publish/clrjit.dll
    .dll windows:6 windows x64 arch:x64

    3f9720bbb0670cc703d4d9b5a9d80407


    Headers

    Imports

    Exports

    Sections

  • publish/coreclr.dll
    .dll windows:6 windows x64 arch:x64

    2737d9922001d87d319ab7906903520e


    Headers

    Imports

    Exports

    Sections

  • publish/createdump.exe
  • publish/hostfxr.dll
    .dll windows:6 windows x64 arch:x64

    7534859af8c7bfef2598e27433761580


    Headers

    Imports

    Exports

    Sections

  • publish/hostpolicy.dll
    .dll windows:6 windows x64 arch:x64

    d1be16ea1f80109d9455f5621981f9af


    Headers

    Imports

    Exports

    Sections

  • publish/mscordaccore.dll
  • publish/mscordaccore_amd64_amd64_8.0.123.58001.dll
  • publish/mscordbi.dll
  • publish/mscorlib.dll
  • publish/mscorrc.dll
  • publish/msquic.dll
  • publish/netstandard.dll