General

  • Target

    Asteroid.zip

  • Size

    4.1MB

  • MD5

    f40f41935dd962f620299325e93c6638

  • SHA1

    44d5efb049abc990705c3dc7eb9466889d6383ac

  • SHA256

    00a4b578e46beee67c41961bc736be6d8883d5b21e937c6ca888a2f69ad5ee38

  • SHA512

    e35087e268bf9c822e1db76e90ef90993cfdd5c69342b694a27c96bf73ba69f25c631fe07a084d8d2456621ac3f153709cbd282ae681671b38f6fe6bb8ea1f4e

  • SSDEEP

    98304:VNyAMPhbSUnEi4SrVGOugTzN3gTcKF9+j1Rs3tUbaDqTTRqrEj/Hcb82zQGEKLMd:VNyjJuUny2ugTz+TcMIxO3tUbZlj/Hvn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Asteroid.zip
    .zip

    Password: 1

  • !!!! the password is 1 !!!!
  • AsteroidPC.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1

    6eb907d7b30d125b948edd1dcc49e899


    Headers

    Imports

    Sections

  • Injectors/processhacker-2.39-setup.exe
    .exe windows:1 windows x86 arch:x86

    Password: 1


    Code Sign

    Headers

    Sections

  • how to use.txt
  • why is there a password.txt