General

  • Target

    Go6_tool.rar

  • Size

    36.2MB

  • MD5

    d95ad060a822204ab46f1e542fb85fc8

  • SHA1

    584504d4f209c20a488a240aa61bf7e7e087dc61

  • SHA256

    566535ebb05634c7c131ffa08742b64d99e41a0ea942f88c359821d7ed3d26d7

  • SHA512

    8ee03156f1812892c398af0b9cf5b58888f9af1e3f09a666eb52488cbc294d5b6be31dd0182be42a768d8dd271e5c59562d20446cf80d46f31e46e51640c4c44

  • SSDEEP

    786432:VG/CSnUGe7al1S4MrleKTzeKR1rRG/qLlcnw7ncZtKYQRx:4nUGwkQ4MBeGiKfvntYk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • Go6_tool.rar
    .rar
  • Go6/Go6.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Go6/PyQt5/QtCore.pyd
    .dll windows:6 windows x64 arch:x64

    5fa8e8e1a536a452c5c43ec429304b40


    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/QtGui.pyd
    .dll windows:6 windows x64 arch:x64

    fff3a072c710567e478959827054a5eb


    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/QtWidgets.pyd
    .dll windows:6 windows x64 arch:x64

    019ae7bf39c59f8c4fd6f06afbb0c0ad


    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/iconengines/qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    cb7bcafac90ccee76bfa5d1af9cbb951


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    83ab23a3497602da865da8cb952268f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    68eb3d9bbb362d72fd269c31936761fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    35e88ae047c52cbe14244b0b041c3d03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    bb20e83974c98263f528b6a929a02bdf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    2cf21fe757a0a84f5b8a5594668ca036


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/imageformats/qtga.dll
    .dll windows:6 windows x64 arch:x64

    870b9d72e7052f0dd8d119bd2bf4aa05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/imageformats/qtiff.dll
    .dll windows:6 windows x64 arch:x64

    9fe4e69f865bd693d0a0abfdb4d03dc3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    305f5f129c922b027d0dae792141dfe6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    75ef711dbfdc9de487f7cfea43217256


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/mediaservice/dsengine.dll
    .dll windows:6 windows x64 arch:x64

    889d8030c65f580ddd002fbfacbe74a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/mediaservice/qtmedia_audioengine.dll
    .dll windows:6 windows x64 arch:x64

    e7cf9d1c85056f7d41bfc28554075538


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/mediaservice/wmfengine.dll
    .dll windows:6 windows x64 arch:x64

    52a5b8315ff73abbd15ef15794f718e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/platforms/qminimal.dll
    .dll windows:6 windows x64 arch:x64

    39e38171acc6c093221924a7d99f83ff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/platforms/qoffscreen.dll
    .dll windows:6 windows x64 arch:x64

    18e31d7343627c27ddaa6810fdb0e219


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/platforms/qwebgl.dll
    .dll windows:6 windows x64 arch:x64

    385c325af4a42a21095a1f79bf9b0227


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    b8287a581b45f1f245f12be7c017f17f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/platformthemes/qxdgdesktopportal.dll
    .dll windows:6 windows x64 arch:x64

    8caf40786ed7a37d5d30395a043e4d75


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/printsupport/windowsprintersupport.dll
    .dll windows:6 windows x64 arch:x64

    376306594a1824669e49904ce763dfe6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/qt-plugins/styles/qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    3d3040efa646d84bc8bc2fb2d65abf99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/PyQt5/sip.pyd
    .dll windows:6 windows x64 arch:x64

    04ef69d8906f92a14be505228b53196e


    Headers

    Imports

    Exports

    Sections

  • Go6/README.txt
  • Go6/_asyncio.pyd
    .dll windows:6 windows x64 arch:x64

    04f465ecd8eff83e2c18078c8c25456e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/_bz2.pyd
    .dll windows:6 windows x64 arch:x64

    d0a62ab71a2b2ca69c6aba1f0a37fcdd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/_ctypes.pyd
    .dll windows:6 windows x64 arch:x64

    de64e4a0e2dbc68a0b413ce8099db5c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/_decimal.pyd
    .dll windows:6 windows x64 arch:x64

    73c2b50451f272a440f47564c3cbd631


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/_elementtree.pyd
    .dll windows:6 windows x64 arch:x64

    3581bde43d1dd1999267ea7f27542ab4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/_hashlib.pyd
    .dll windows:6 windows x64 arch:x64

    b3b294bbb4a8941fd67b11ccbe0be65b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/_lzma.pyd
    .dll windows:6 windows x64 arch:x64

    c39c7a021b2adfc11bb34f105f70355e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/_multiprocessing.pyd
    .dll windows:6 windows x64 arch:x64

    ad5e2bc3f4742dadfaf9e74afc91a9f0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/_overlapped.pyd
    .dll windows:6 windows x64 arch:x64

    48664681fdde7330197ca0b81cd0888e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/_queue.pyd
    .dll windows:6 windows x64 arch:x64

    d39104d594ed5774205f94197c63bfbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/_socket.pyd
    .dll .js windows:6 windows x64 arch:x64 polyglot

    332065e5d19d708832b034da27e5571a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/_ssl.pyd
    .dll windows:6 windows x64 arch:x64

    f5dfcd62c36effcb7c07509271acfce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/_uuid.pyd
    .dll windows:6 windows x64 arch:x64

    368b62645c11988f8173cf8bdd0fea25


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/assets/droplet.svg
  • Go6/assets/globe.svg
  • Go6/assets/go6icon.ico
  • Go6/assets/home.svg
  • Go6/assets/log-in.svg
  • Go6/assets/message-circle.svg
  • Go6/assets/message-square.svg
  • Go6/assets/send.svg
  • Go6/assets/settings.svg
  • Go6/assets/tag.svg
  • Go6/assets/users.svg
  • Go6/assets/volume-2.svg
  • Go6/assets/x.svg
  • Go6/certifi/cacert.pem
  • Go6/charset_normalizer/md.pyd
    .dll windows:6 windows x64 arch:x64

    f8c0f377107b03e523f21dcf227dcf24


    Headers

    Imports

    Exports

    Sections

  • Go6/charset_normalizer/md__mypyc.pyd
    .dll windows:6 windows x64 arch:x64

    feb2f48749cb30e4f1a2a48b5a94a37c


    Headers

    Imports

    Exports

    Sections

  • Go6/concrt140.dll
    .dll windows:6 windows x64 arch:x64

    7f070c3864ce20e1b9879a9e3126cd30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/data/config.json
  • Go6/data/pfp/Screenshot_1.png
    .png
  • Go6/data/pfp/f09070e0aab82e7be666bdebf0cc9034.png
    .png
  • Go6/data/scraped/1193926510982209678.txt
  • Go6/data/scraped/names.txt
  • Go6/data/tokens.txt
  • Go6/libcrypto-1_1.dll
    .dll windows:6 windows x64 arch:x64

    11f2ed72076bbf7871eb95fd5b4e84b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/libeay32.dll
    .dll windows:6 windows x64 arch:x64

    a25b6a1fbab81f01d560a8ffbb0bae78


    Headers

    Imports

    Exports

    Sections

  • Go6/libffi-8.dll
    .dll windows:6 windows x64 arch:x64

    3dc8b86d60f90a1851eee5f9dc191312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/libssl-1_1.dll
    .dll windows:6 windows x64 arch:x64

    3adf02a15243fccc51beb2b37fbf071d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    01c801a34c4715440ef1f25ad689b315


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    a1d1434dddb062f5f5d6615852def52b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/psutil/_psutil_windows.pyd
    .dll windows:6 windows x64 arch:x64

    7655a95700b7d9f6fc1f226e258e1235


    Headers

    Imports

    Exports

    Sections

  • Go6/pyexpat.pyd
    .dll windows:6 windows x64 arch:x64

    c1efb4aba5d0a4e13411d9eacdb4e8d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/python3.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Go6/python311.dll
    .dll windows:6 windows x64 arch:x64

    7bcba99f43dec2147effa329c42a4378


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/pythoncom311.dll
    .dll windows:6 windows x64 arch:x64

    1b264cd576a6b6117b47db03980bc455


    Headers

    Imports

    Exports

    Sections

  • Go6/pywintypes311.dll
    .dll windows:6 windows x64 arch:x64

    5b71a076f0c32bb52117188a36e3fec6


    Headers

    Imports

    Exports

    Sections

  • Go6/qt5core.dll
    .dll windows:6 windows x64 arch:x64

    6d44a16d5801e1cdb9b3ba4cb45314b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/qt5dbus.dll
    .dll windows:6 windows x64 arch:x64

    9b237e93afcc7ace33031c9cf4b68c7d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/qt5gui.dll
    .dll windows:6 windows x64 arch:x64

    ddcb78f3a4297344c620aa83af64ddfd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/qt5multimedia.dll
    .dll windows:6 windows x64 arch:x64

    7600665a844daa64d88eb4f04005092e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/qt5network.dll
    .dll windows:6 windows x64 arch:x64

    c0e2c58de25ce77b283ad911460cea11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/qt5printsupport.dll
    .dll windows:6 windows x64 arch:x64

    ad1c8bbd41a8772e591598332fe1342c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/qt5qml.dll
    .dll windows:6 windows x64 arch:x64

    17c45f48289bee293cec012345a8096d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/qt5qmlmodels.dll
    .dll windows:6 windows x64 arch:x64

    53c7f625a0c46de552b4b53839bc1d6c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/qt5quick.dll
    .dll windows:6 windows x64 arch:x64

    d6c8cb31820bb3c11dcd63f44dd924fb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/qt5svg.dll
    .dll windows:6 windows x64 arch:x64

    6c684f5759e91250e01af7b49c78ca3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/qt5websockets.dll
    .dll windows:6 windows x64 arch:x64

    8293f00521f39ee8d36d02be4a182e21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/qt5widgets.dll
    .dll windows:6 windows x64 arch:x64

    8ac796c200bcdb47fab6297f47883022


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/runtime.dll
    .dll windows:6 windows x64 arch:x64

    f5e3e68eae95fb91dc17f304bee5b536


    Headers

    Imports

    Exports

    Sections

  • Go6/select.pyd
    .dll windows:6 windows x64 arch:x64

    fc4f7d736924aa67a1bd7b7b80894df9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/ssleay32.dll
    .dll windows:6 windows x64 arch:x64

    6db00d700097d01601bd093705a52cc9


    Headers

    Imports

    Exports

    Sections

  • Go6/tls_client/dependencies/tls-client-32.dll
    .dll windows:6 windows x86 arch:x86

    67cecfd4bd0119299b8254ed64864c3a


    Headers

    Imports

    Exports

    Sections

  • Go6/tls_client/dependencies/tls-client-64.dll
    .dll windows:6 windows x64 arch:x64

    7ecc3b9e18c31c23f5275a91f6c533d1


    Headers

    Imports

    Exports

    Sections

  • Go6/unicodedata.pyd
    .dll windows:6 windows x64 arch:x64

    bb6f6d951dbdd290ecf382ca57459172


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    bf380ca954cbf10d1a4cef9ec18e46fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Go6/win32security.pyd
    .dll windows:6 windows x64 arch:x64

    0b789b8150f71358fde6ba70a30a6696


    Headers

    Imports

    Exports

    Sections

  • Go6/zstandard/_cffi.pyd
    .dll windows:6 windows x64 arch:x64

    a4f663bc77d2671c859ff6226656a2fb


    Headers

    Imports

    Exports

    Sections

  • Go6/zstandard/backend_c.pyd
    .dll windows:6 windows x64 arch:x64

    0c4c253e719bb538a4188bc610bcddb7


    Headers

    Imports

    Exports

    Sections