General

  • Target

    6.zip

  • Size

    251KB

  • MD5

    37b388a041fe3aebf924c9b48992de87

  • SHA1

    ca01a12097cee4b229c9966b0576b4ac11a70e76

  • SHA256

    5cba0aacc10f218f707eee674acdba2f5a27cfd6d1751a935e313aa28526a88c

  • SHA512

    17deb63015aa8e9d7d08adef215b07e5542cc92626e787c3e3e0ea6a526630ab917863e997e42334d35bdb56f921b440be9eacbb5287fb510ede1d5d1e93ed35

  • SSDEEP

    6144:A+QTrOmfZfV9mVU+thw/6rpw2BTC8l4nx5XwYL/TaabgUzLn:A+QXv7tt6e2BTXIx5XwYb5pLn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 6.zip
    .zip
  • 6/driver.sys
    .sys windows:10 windows x64 arch:x64

    ccea250b1319c1952e5d98024ffbc5c3


    Code Sign

    Headers

    Imports

    Sections

  • 6/kdmapper.exe
    .exe windows:6 windows x64 arch:x64

    8613b496027ce842c1160a3b8fd30bda


    Headers

    Imports

    Sections

  • 6/quyengabon hack.exe
    .exe windows:6 windows x64 arch:x64

    4cfdf9f142d03ba26cd59b4cf4d5c250


    Headers

    Imports

    Sections

  • 6/quyengabon.sys
    .sys windows:10 windows x64 arch:x64

    fc664ebc1867cc6ee2441162db7a2d2c


    Headers

    Imports

    Sections