General

  • Target

    Tests.rar

  • Size

    28.4MB

  • MD5

    d5c205f0486c119d22ef75a05e928ba9

  • SHA1

    2c77e6ffdd2657f9a87fe2713903c6b3e47caede

  • SHA256

    7b0780df3737df263ee830137cf22901811bbe7e365742b9d5cf5a0d11ff93f7

  • SHA512

    2d926d8a96dec5a38d96b4e2475884af44e839ad292a5ec5d9a90198f0f9e7862a9f6ef0330e5b0e238886e70b368e401273ec64fb73e7a8e0989beb821db6d0

  • SSDEEP

    786432:5Vbe9JYsPN/mUZerH2VxDGkkEEaiAumIbf+YazhFf8KTNOcOSUS7Vub:7beN+UZsH2VxCkCSsA7OcOSb7Vub

Score
10/10

Malware Config

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Tests.rar
    .rar .zip polyglot
  • Solaris.zip
    .zip
  • enviorment/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • enviorment/Monaco/Monaco.html
    .js
  • enviorment/Monaco/debug.log
  • enviorment/Monaco/vs/MonacoNet.dll
    .dll windows:6 windows x86 arch:x86

    785d680cbd472fae503fd72ce14d28cb


    Headers

    Imports

    Sections

  • enviorment/Monaco/vs/base/worker/workerMain.js
    .js
  • enviorment/Monaco/vs/basic-languages/lua/lua.js
  • enviorment/Monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • enviorment/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • enviorment/Monaco/vs/editor/editor.main.css
  • enviorment/Monaco/vs/editor/editor.main.js
    .js
  • enviorment/Monaco/vs/editor/editor.main.nls.de.js
  • enviorment/Monaco/vs/editor/editor.main.nls.es.js
  • enviorment/Monaco/vs/editor/editor.main.nls.fr.js
  • enviorment/Monaco/vs/editor/editor.main.nls.it.js
  • enviorment/Monaco/vs/editor/editor.main.nls.ja.js
  • enviorment/Monaco/vs/editor/editor.main.nls.js
  • enviorment/Monaco/vs/editor/editor.main.nls.ko.js
  • enviorment/Monaco/vs/editor/editor.main.nls.ru.js
  • enviorment/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • enviorment/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • enviorment/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • enviorment/Monaco/vs/loader.js
    .js
  • enviorment/Siticone.UI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • enviorment/System.ClientModel.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • enviorment/System.Memory.Data.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • enviorment/System.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • enviorment/System.Threading.Tasks.Extensions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • enviorment/UIRemake.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • enviorment/UIRemake.exe.config
  • enviorment/UIRemake.pdb
  • enviorment/Wave.dll
    .dll windows:6 windows x64 arch:x64

    5f1988dd053a64d4ce09004bcc3d1a55


    Headers

    Imports

    Sections

  • enviorment/dxcompiler.dll
    .dll windows:10 windows x64 arch:x64

    86379d9f4693f2aa059197611ab2ffc7


    Headers

    Imports

    Exports

    Sections

  • enviorment/dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • enviorment/mainslr.dll
    .dll windows:6 windows x64 arch:x64

    274c98bf122b5a63d8305e17d0e1536c


    Headers

    Imports

    Sections

  • enviorment/read.txt
  • enviorment/textword.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • enviorment/websocket-sharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • enviorment/workspace/.tests/appendfile.txt
  • enviorment/workspace/.tests/getcustomasset.txt
  • enviorment/workspace/.tests/isfile.txt
  • enviorment/workspace/.tests/listfiles/test_1.txt
  • enviorment/workspace/.tests/listfiles/test_2.txt
  • enviorment/workspace/.tests/loadfile.txt
  • enviorment/workspace/.tests/readfile.txt
  • enviorment/workspace/.tests/writefile.txt
  • enviorment/workspace/IY_FE.iy