General

  • Target

    Spoofer.zip

  • Size

    1.3MB

  • MD5

    e6f5e55ee79b9f95f97500f780c2e44b

  • SHA1

    4636486d0196ce66a6220da40624f450faaa4e2e

  • SHA256

    5f4c0d1a6ebebd546aaf6bf1c019bd8f3e43a28d78a6806b0fba45ed1e6810fd

  • SHA512

    57cfaba778e1aaa3031bb5503da3651c8ace76fdf490fab57d9a081a733803897b9832ab16fa4e68fef8c55cfcb6aabc9775f3295c64393cb023c793bb22033f

  • SSDEEP

    24576:9bGibs/4Z+LzrwB/CbdOB4PHIJnp2oHEXCr6Ts/3I8fdbGAAAYxworZLeQ:9K1/4orwBmdOB4PoJp2TX4/z8BAYxwop

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Spoofer.zip
    .zip
  • Spoofer/Spoofer_Mta_Fodase.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Spoofer/mapper.exe
    .exe windows:6 windows x64 arch:x64

    9aa7e87a8a758cf2a002bfc1668c2b4b


    Headers

    Imports

    Sections

  • Spoofer/service.sys
    .sys windows:10 windows x64 arch:x64

    fe698619e8737fed9feabf638933fac1


    Code Sign

    Headers

    Imports

    Sections