General

  • Target

    win32.rar

  • Size

    26.4MB

  • MD5

    fcf60c01dc42e5cc5ca9f550401a2549

  • SHA1

    62b8088e69ba094b809f99a2242b36198fb2c740

  • SHA256

    ed38a436640986f373b49e008fb897c4339dbc894aba4026e37cf4affb9caa44

  • SHA512

    75b9116224e82b7ac22fb21c9fc513644238c8cbf67a5f287ecc5393f1f37a659c92d4e5201efe6223c61cf298f74dd91d0b72005c378db36807f3b3a442bda8

  • SSDEEP

    786432:yIGH/SvLqY5zQWG4MOt3+ROwhdWRpwZzYCDnJCFP/zeTnL:0SDqY5zQp4rtQ9cpCzNDnJCFzeTL

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • win32.rar
    .rar
  • freeglut.dll
    .dll windows:5 windows x86 arch:x86

    316e75cbedd944b4dfe7dfc2f8453f42


    Headers

    Imports

    Exports

    Sections

  • renderer.dll
    .dll windows:5 windows x86 arch:x86

    b844bfa40321c91226f7e16830b29d15


    Headers

    Imports

    Exports

    Sections

  • renderer.exe
    .exe windows:5 windows x86 arch:x86

    68802fa5d3e24fc1af91e2038218d38e


    Headers

    Imports

    Exports

    Sections

  • renderer_d.dll
    .dll windows:5 windows x86 arch:x86

    eafe278c562adaa5fe86727e35ffa4ff


    Headers

    Imports

    Exports

    Sections

  • renderer_d.exe
    .exe windows:5 windows x86 arch:x86

    85ea70de3b08ed5a94cc640506ce7888


    Headers

    Imports

    Exports

    Sections