Resubmissions

13/05/2024, 15:23

240513-ssg2ysbh9s 7

13/05/2024, 15:15

240513-sm1bcabf4s 7

General

  • Target

    ElSupremoScripts.7z

  • Size

    33.4MB

  • MD5

    fc108fdb06aedc60b42f50f7fa92f40e

  • SHA1

    cd50860ae0b95a2049f276d55db0b9dca0fcf2e3

  • SHA256

    66bdea464345af293b4c9b9fb76f268fb168287a553cedb5e7f0043a4bb14aa8

  • SHA512

    7a3fc79de67ef6b3738a081673a67710230f14aaf4d4a6596ae7133d952cd7de46240171ef2987c550a8970c1da65bc2b0f0c2517f4e603fd6a4ac7c8191d5a7

  • SSDEEP

    786432:XVHf8WPmtf8g5ZEBsL4n9/ep/i5m1M5caePPvgF:XVHf8ZpF5KV0p/Gm1PS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • ElSupremoScripts.7z
    .7z
  • ElSupremoScripts/Run.bat
    .bat .vbs
  • ElSupremoScripts/Update.bat
  • ElSupremoScripts/program/anime.php
  • ElSupremoScripts/program/archive.php
  • ElSupremoScripts/program/config.ini
  • ElSupremoScripts/program/daddy.php
  • ElSupremoScripts/program/dtt.log
  • ElSupremoScripts/program/dtt.php
  • ElSupremoScripts/program/error.log
  • ElSupremoScripts/program/ext/php_curl.dll
    .dll windows:6 windows x64 arch:x64

    21a541285d06cfd57960ccbcfd4e7d10


    Headers

    Imports

    Exports

    Sections

  • ElSupremoScripts/program/ext/php_openssl.dll
    .dll windows:6 windows x64 arch:x64

    fe6bdfac705380e0674dd1fa6044005f


    Headers

    Imports

    Exports

    Sections

  • ElSupremoScripts/program/extras/ssl/cacert.pem
  • ElSupremoScripts/program/extras/ssl/openssl.cnf
  • ElSupremoScripts/program/head.php
  • ElSupremoScripts/program/libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    57fb72bea076c78919ad44f230d0d1e5


    Headers

    Imports

    Exports

    Sections

  • ElSupremoScripts/program/libssh2.dll
    .dll windows:6 windows x64 arch:x64

    35fe9cf039ab99200dd73ab9e00a4677


    Headers

    Imports

    Exports

    Sections

  • ElSupremoScripts/program/libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    7f51b8a4d8db4147f31561dd07315946


    Headers

    Imports

    Exports

    Sections

  • ElSupremoScripts/program/nghttp2.dll
    .dll windows:6 windows x64 arch:x64

    b0127c6707895f3c5df9573fc75d892b


    Headers

    Imports

    Exports

    Sections

  • ElSupremoScripts/program/onDemand.php
  • ElSupremoScripts/program/php.exe
    .exe windows:6 windows x64 arch:x64

    3d0732d3fff19c13aee1e6a7aa116dce


    Headers

    Imports

    Exports

    Sections

  • ElSupremoScripts/program/php.ini
  • ElSupremoScripts/program/php7.dll
    .dll windows:6 windows x64 arch:x64

    b8ee96b7248cb190e593332c8f43ec83


    Headers

    Imports

    Exports

    Sections

  • ElSupremoScripts/program/php7embed.lib
  • ElSupremoScripts/program/player/d3dcompiler_43.dll
    .dll windows:10 windows x64 arch:x64

    824d17f150756620b70aa929623006bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ElSupremoScripts/program/player/etc/mpv.conf
  • ElSupremoScripts/program/player/fonts/NotoEmoji-Regular.ttf
  • ElSupremoScripts/program/player/fonts/NotoNaskhArabic-Regular.ttf
  • ElSupremoScripts/program/player/fonts/NotoSans-Regular.ttf
  • ElSupremoScripts/program/player/fonts/NotoSansHans-Regular.otf
  • ElSupremoScripts/program/player/fonts/NotoSansJP-Regular.otf
  • ElSupremoScripts/program/player/fonts/NotoSansKR-Regular.otf
  • ElSupremoScripts/program/player/mpv.com
    .exe windows:6 windows x64 arch:x64

    fb79f0de60e920322535eed5a062b15b


    Headers

    Imports

    Sections

  • ElSupremoScripts/program/player/mpv.conf
  • ElSupremoScripts/program/player/mpv.exe
    .exe windows:6 windows x64 arch:x64

    0c6828389b0e30478d87734ef4ee27ac


    Headers

    Imports

    Exports

    Sections

  • ElSupremoScripts/program/player/mpv/fonts.conf
    .xml
  • ElSupremoScripts/program/tools.php
    .ps1
  • ElSupremoScripts/program/tvSport.php
  • ElSupremoScripts/program/update.php
    .ps1