General

  • Target

    temp.rar

  • Size

    60KB

  • MD5

    63ae51e80d471fd5bd25c3a23ce1b7c5

  • SHA1

    52cfc5669fbdf7d59783a4fe133673175520352c

  • SHA256

    377ca40c0b471aa9730c70f4c07776657b287be77683e542ea63b352a0df685f

  • SHA512

    4d7e66992b14806f971706d60d5591e4fcc542a3c6e75ad678660e8c40b85f11cadcb534ceca05e0514110b36b9036d4e7601f642835e4fe495d5d30686370d5

  • SSDEEP

    1536:Zssl8GAng5aJYVG6I0DBg9u634wnTwRle4ZqQvvbeBWA:WsOHng5HV4wBg9u6yRltZL8WA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • temp.rar
    .rar
  • temp/hwidspoofer.sys
    .sys windows:10 windows x64 arch:x64

    a3fc15df0095a1a39e807fbd1ab75c38


    Code Sign

    Headers

    Imports

    Sections

  • temp/mapper.exe
    .exe windows:6 windows x64 arch:x64

    2f7ae5cf50f80f4cf6e0d858b17bed85


    Headers

    Imports

    Sections