General

  • Target

    289nd73bos.zip

  • Size

    26.9MB

  • MD5

    ad95154d5a31b0c97100c4258391bf03

  • SHA1

    fe004e770fed94b4063ab081dc68c33f52ab3077

  • SHA256

    2c4248d66665187932551b0aa91d1d5154821bfd1565b25d7f5a7de844e326c5

  • SHA512

    7a89dd12f2ac7806ff6e141ff6d5b6f64b2e21aa88d268b56dcd4673a3edbc196757ae88a171093a48fde9e435225ba446935009579baa2a6100271de24bc1a5

  • SSDEEP

    786432:JCaxVC6SMj8VZ5mWP/kj7y6OJHTE9E1Kp39K3frnb:xzYVZpP/9NTE9EKpNK3Dnb

Score
7/10

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 289nd73bos.zip
    .zip
  • Karma.rar
    .rar .zip polyglot
  • karmashit-main (1).zip
    .zip
  • karmashit-main/FIX 1.bat
  • karmashit-main/FIX 2.bat
  • karmashit-main/Karma.exe
    .exe windows:6 windows x64 arch:x64

    612e8afb77598c53323490687026d5f2


    Headers

    Imports

    Exports

    Sections

  • karmashit-main/OPEN IF IT DOESN'T WORK.txt
  • karmashit-main/README.md
  • karmashit-main/endpoint
  • karmashit-main/main.exe
    .exe windows:5 windows x64 arch:x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • main.pyc
  • karmashit-main/main.py