General

  • Target

    ud_spoof_pack_made_by_rea.rar

  • Size

    149KB

  • MD5

    4d67136ef09647be1e136f390bae967c

  • SHA1

    425b497dd6d7a79eb0602b88a3c5cf59b5e0e88a

  • SHA256

    75efabed54978b7588faafb99ef91d00a346b9cb31bf4e0ce6cb823a6286a581

  • SHA512

    5afb931f8c48dba83470f02cfceb9571a0c8a3e4dabcf5b7cb2dbd224202fec12757d39b0f96def4689bc01bc113f9e464c7fd049b40ce635690714aa37d57ea

  • SSDEEP

    3072:o42lNEuIgsoF1YfeRuYm92pxQeXr64Wx3yBny2jfoijfvWoO/ilNRhAYSPHG5:hWNh1YfeGkOeXrVC47jpmZ/woYS+5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ud_spoof_pack_made_by_rea.rar
    .rar

    Password: qdq

  • ud spoof pack made by rea/Zoticc_deep_cleaner.bat
    .bat .vbs
  • ud spoof pack made by rea/artic.sys
    .sys windows:10 windows x64 arch:x64

    410b48edaf470cbb2b101861e4c35b6b


    Code Sign

    Headers

    Imports

    Sections

  • ud spoof pack made by rea/mac.bat
  • ud spoof pack made by rea/mapper.exe
    .exe windows:6 windows x64 arch:x64

    Password: qdq

    dc05b941cfcf2b45155d9541b3d972b4


    Headers

    Imports

    Sections