Resubmissions

08/04/2024, 14:32

240408-rwlc4sbd52 10

General

  • Target

    !@!FulL_Ver_$etup_6678_pAs$W0rd_.zip

  • Size

    20.6MB

  • MD5

    ea997fa490d278ed0526f67d678186ed

  • SHA1

    5f1e76be9606d3db6bf41f243dcbbe902a210669

  • SHA256

    84f64bec247f6f2a947f0e93e23f1ee648edab8dca6cd534c587301c33abf5e9

  • SHA512

    f737894f14374ccbf4b444b823649e6a8d06c3084d2e0fbf69e0e978a6b018d1dbce21e2dbadb17a66a6029fbd3668fed180d6e0ecd09ad33c23c8cb882e6112

  • SSDEEP

    393216:4c3eDVt1pSUIde4ZM4Z2sCLXLWxYemqUBl7VWCeBHDypFfMzRG9:4nVdLId9fZsLXqxYejUj5iWFfUR4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • !@!FulL_Ver_$etup_6678_pAs$W0rd_.zip
    .zip

    Password: 6678

  • @!FulL_Ver_$etup_6678_pAs$W0rd.zip
    .zip

    Password: 6678

  • Data.pt
    .exe windows:6 windows x64 arch:x64

    Password: 6678

    bbc63216b8ddbe8c707b7e797b57565d


    Code Sign

    Headers

    Imports

    Sections

  • Pas$Word.png
    .png

    Password: 6678

  • Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    Password: 6678

    2530442c15bdf5e880f3e86bd015d2bf


    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    Password: 6678

    8307f0e2ecc6bdee56d484a6da9becc5


    Headers

    Imports

    Exports

    Sections

  • Setup.exe
    .exe windows:6 windows x64 arch:x64

    Password: 6678

    e8f6984829b11831577c4d66dfedf94f


    Code Sign

    Headers

    Imports

    Sections

  • eleven.svg
  • expressman.tif
  • libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: 6678

    eb9cfc22836094167bd699fc0a51bab6


    Headers

    Imports

    Exports

    Sections

  • libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: 6678

    74f51c2177062ab2752fc871ebf0d685


    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    7be75bce9bc33e1e12ce35a06ab9327d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    20717227ccb65afbaea7feeb74196ea2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • steam_api64.dll
    .dll windows:6 windows x64 arch:x64

    c69c22b5a3698527f0d3c9618c3affbd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • updater/GUP
    .exe windows:6 windows x64 arch:x64

    2b01d1e6f097308c51e2174a892534f3


    Code Sign

    Headers

    Imports

    Sections

  • updater/LICENSE
  • updater/README.md
  • updater/enco.dll
    .exe windows:6 windows x86 arch:x86

    7f483786751f690c02ae2784f1534515


    Code Sign

    Headers

    Imports

    Sections

  • updater/gup.xml
    .xml
  • updater/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    6ef556d2b31956dae3aa7d51b8168879


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • updater/nativeLang.xml
    .xml
  • updater/updater.dll
    .exe windows:5 windows x86 arch:x86

    027ea80e8125c6dda271246922d4c3b0


    Code Sign

    Headers

    Imports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    f241ab269df0f49a166138f5cc16a017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Pas$Word.png
    .png