Resubmissions

11/05/2024, 22:32

240511-2fw5sacb6y 3

11/05/2024, 22:25

240511-2cerbsef84 3

11/05/2024, 22:23

240511-2awl3aee92 10

General

  • Target

    f.rar

  • Size

    56.6MB

  • MD5

    0653340b129dd96b62cb3aa03aaac8e1

  • SHA1

    c2ba712cabc3a4803583399002687d1b058bc3ae

  • SHA256

    69a150ee90115001c2e03daddb4d6a260cc11a59909370de086f023397013156

  • SHA512

    7ffa8986c016272e4bd58db0d69b52c3a61550d2d0b41ea5b9338e1b8c27843cd367753f7e96482201cdc6bc10a7d8cfa05587fdf279ee00c49e06c7e80f2ab3

  • SSDEEP

    1572864:l0/hYE2Q4ytvOsJf0LKQWjsOFAbmUIj6/OZJx2Pk:ohYTQ4kOsJ8KQWjsiqq0Pk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • f.rar
    .rar .zip polyglot
  • f/2Take1MenuVIP.zip
    .zip
  • Launcher.dat
  • Launcher.exe
    .exe windows:6 windows x64 arch:x64

    8ba84303059bff9d986999514225e980


    Headers

    Imports

    Sections

  • Updater.exe
    .exe windows:6 windows x64 arch:x64

    91533cd0901a926548d904883f897c08


    Headers

    Imports

    Sections

  • spel64.dll
    .dll windows:6 windows x64 arch:x64

    2e7b0100a9237666ee729368d7009231


    Headers

    Imports

    Exports

    Sections

  • f/KFlauncher.rar
    .rar
  • f/a4fbd5dfa976d2526590065d16e166ae2ba5b58a17bdcc8d1efbaca35ae55cdd.zip
    .zip

    Password: infected

  • a4fbd5dfa976d2526590065d16e166ae2ba5b58a17bdcc8d1efbaca35ae55cdd.exe
    .exe windows:6 windows x86 arch:x86

    64f172a8d6c228ad08f7ecbb9b6b2001


    Headers

    Imports

    Sections