General

  • Target

    f.zip

  • Size

    56.6MB

  • MD5

    59ae6bf394b0197690b150fa434875c9

  • SHA1

    9e1aa809157c270c28814b4c3691da1524ea8958

  • SHA256

    34a87b65af17ae17786fd5777b1c43bca963a40178f77388f8b433a7f03fd32a

  • SHA512

    047369150c1eb271ea1a9a122caf1f50bc5c765c1ad4846b74cf5c0cdd76e2098461f0564a7bd4ba5cb6307b04ee569c1b6e6153147f478fc18218203990da47

  • SSDEEP

    1572864:FZJx2PM0/hYE2Q4ytvOsJf0LKQWjsOFAbmUIj6/i:B0PZhYTQ4kOsJ8KQWjsiqi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • f.zip
    .zip
  • f/2Take1MenuVIP.zip
    .zip
  • Launcher.dat
  • Launcher.exe
    .exe windows:6 windows x64 arch:x64

    8ba84303059bff9d986999514225e980


    Headers

    Imports

    Sections

  • Updater.exe
    .exe windows:6 windows x64 arch:x64

    91533cd0901a926548d904883f897c08


    Headers

    Imports

    Sections

  • spel64.dll
    .dll windows:6 windows x64 arch:x64

    2e7b0100a9237666ee729368d7009231


    Headers

    Imports

    Exports

    Sections

  • f/KFlauncher.rar
    .rar
  • f/a4fbd5dfa976d2526590065d16e166ae2ba5b58a17bdcc8d1efbaca35ae55cdd.zip
    .zip

    Password: infected

  • a4fbd5dfa976d2526590065d16e166ae2ba5b58a17bdcc8d1efbaca35ae55cdd.exe
    .exe windows:6 windows x86 arch:x86

    64f172a8d6c228ad08f7ecbb9b6b2001


    Headers

    Imports

    Sections