General

  • Target

    AuroraX.zip

  • Size

    12.3MB

  • MD5

    e850403521c6072187a7712d767d74d6

  • SHA1

    22ca0e8468328c093cbd50e362831ad97e86da9c

  • SHA256

    22dd3a37795cb305f8aa1d894b832343549cf104cf498628c3a7d55e6ffa5812

  • SHA512

    44eb7b29c9793a0b9d30d0d65fa47989a8c0421b23d252e5c493613c8a2139e3764cd13504d5d008793a0ea3d498ee81f23f59d7db31244821c2d7cfb92f4d35

  • SSDEEP

    196608:q/I5zY0znpdXcNaWUg9aUIU7OVHi1/dyNMUxJw1KDtfZNNoPPo:kFopdmYg9IOYHi1VeMUxJbBffqPQ

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • AuroraX.zip
    .zip
  • AuroraX/AURORA V1.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • $INTERNET_CACHE/Aggressive
  • $INTERNET_CACHE/Autos
  • $INTERNET_CACHE/Cigarettes
  • $INTERNET_CACHE/Complexity
  • $INTERNET_CACHE/Even
  • $INTERNET_CACHE/Harold
  • $INTERNET_CACHE/He
  • $INTERNET_CACHE/Herb
  • $INTERNET_CACHE/Indiana
  • $INTERNET_CACHE/Kent
  • $INTERNET_CACHE/Option
  • $INTERNET_CACHE/Organizer
  • $INTERNET_CACHE/Outlet
  • $INTERNET_CACHE/Reminder
  • $INTERNET_CACHE/Requests
  • $INTERNET_CACHE/Somebody
  • $INTERNET_CACHE/Suited
  • $INTERNET_CACHE/Temple
  • $INTERNET_CACHE/Vbulletin
  • AuroraX/dll/VMProtectSDK32.dll
    .dll windows:5 windows x86 arch:x86

    b9f19b4d3ce951c4ff6196681bbb3439


    Headers

    Imports

    Exports

    Sections

  • AuroraX/dll/VMProtectSDK32.lib
  • AuroraX/dll/autoexec/HOW_TO_USE.txt
  • AuroraX/dll/celeryuwp.bin
    .dll windows:6 windows x86 arch:x86

    1c23c1ea89b7252f3716da06ebe3581f


    Headers

    Imports

    Exports

    Sections

  • AuroraX/dll/celeryuwpver
  • AuroraX/dll/uwpoff.bin
  • AuroraX/dll/uwpoffver
  • AuroraX/dll/uwpversion.txt
  • AuroraX/scripts/scripts.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    a9fd3e7f71a802c8eee0a502f46de991


    Code Sign

    Headers

    Imports

    Exports

    Sections