General

  • Target

    Orbit-Paid-Cracked.exe

  • Size

    281KB

  • MD5

    258109965cd2bb45737840f35451eada

  • SHA1

    6f07a929a89fe5fe773a9ad77345f19a79fd6d04

  • SHA256

    62102854c1e59b7f974b5ebedc01fa9018c80b2c2dfdb2842ab8aab89904275c

  • SHA512

    6f0774b9c0ba86c3fd2376807263e9f3f13b7199f02f1b7539dc3491ffb2c315150b8959c44dafba11340e33dc3c882fcebc495e5346952745113528eabdbcf4

  • SSDEEP

    6144:b3ZVT6iP+6W6jZW5Jne5qpPgR5kALgamPSzgXXECYXT7x:NV+MRjZye5hzgqQETXx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Orbit-Paid-Cracked.exe
    .rar
  • Orbit Paid Semi Deobfuscated.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SharpMonoInjector.Console/SharpMonoInjector.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SharpMonoInjector.Console/smi.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • injection.bat