General

  • Target

    Installer.rar

  • Size

    13.6MB

  • MD5

    0fc70d6bb5d57f790902f0002b68330f

  • SHA1

    841dd1f069dbcf8acb259bab1c29e01cd5015681

  • SHA256

    6a23494ce00e7b06127b055750f4836491a979948bcad5468b57574f87b321b2

  • SHA512

    2623f229e34f9bc4aedbc028afa429a7ce7b683990d478339509a6db904012ee66afb26b547b52a6471c1d414bba3f0b85e0c8c1b160376a9c888085b91d8697

  • SSDEEP

    393216:XykUPxJjORf4+hL4wwvuW7gP0x0zhctNDD6K5q:Xt2xFOxJR43UzhW6Oq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Installer.rar
    .rar

    Password: 1515

  • Installer/Install.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1515

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • $INTERNET_CACHE/Abilities
  • $INTERNET_CACHE/Bermuda
  • $INTERNET_CACHE/Emperor
  • $INTERNET_CACHE/Forty
  • $INTERNET_CACHE/Ignore
  • $INTERNET_CACHE/Inquiries
  • $INTERNET_CACHE/Iron
  • $INTERNET_CACHE/Keeping
  • $INTERNET_CACHE/Kid
  • $INTERNET_CACHE/Lexmark
  • $INTERNET_CACHE/Lexus
  • $INTERNET_CACHE/Loved
  • $INTERNET_CACHE/Managing
  • $INTERNET_CACHE/Melissa
  • $INTERNET_CACHE/Norm
  • $INTERNET_CACHE/Que
  • $INTERNET_CACHE/Quilt
  • $INTERNET_CACHE/Terrorist
  • $INTERNET_CACHE/Visited
  • $INTERNET_CACHE/Wrap
  • Installer/scriрts/Readme.api
  • Installer/scriрts/Resource.dat
  • Installer/scriрts/libGLESv2.old
    .dll windows:6 windows x64 arch:x64

    Password: 1515

    94c7fb29a0a5d69da0d7bfab13142024


    Headers

    Imports

    Exports

    Sections

  • Installer/scriрts/sirius.lua.example
  • Installer/update/Accessible.tlb
  • Installer/update/IA2Marshal.dat
    .dll regsvr32 windows:6 windows x64 arch:x64

    Password: 1515

    89556f266a5e711ccfbd9bae475375d1


    Headers

    Imports

    Exports

    Sections

  • Installer/update/update-settings.ini
  • Installer/update/updater.ini