General

  • Target

    Files.rar

  • Size

    15.1MB

  • MD5

    2725dfba31d043ed01a9ca1cb396d461

  • SHA1

    268ef0133b55984793ad578d2f869fad50611cc3

  • SHA256

    709327f59ea221f3338e2429710e4ea8edc96fb1a86d2f5c7180ae9fa65f16c8

  • SHA512

    16b66ee19eff11b39bd7720a537bd59e207eb32deba90ad61ef5552ce5bf31a285efdb729220bd159276a3beca8a15113bcd35644c8317d6627a00d2bc4ea286

  • SSDEEP

    393216:QzH5BA3pV+FZuHC5DMRu9k2UzbPbZIkA0Q/I8B:Y7AZVYEC198tIj/LB

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • Files.rar
    .rar

    Password: 2024

  • Local/Qt5QuickControls2.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2024

    5fb552cb489d6193d5f6e0e593c4f02b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Local/Qt5QuickShapes.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2024

    6ab1c8f49d8c9598ea17bbe70716d0e0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Local/Qt5QuickTemplates2.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2024

    1207e127c5152a305a17a230518040a0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Local/Qt5QuickWidgets.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2024

    43287f32e985e3ffba23e9da46811e56


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Qml.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2024

    1fd44f6df8b7c02f1c6b3a63b910f091


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5QmlModels.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2024

    bdcc9abef23a6cf5114ffaefd67b610c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup.exe
    .exe windows:6 windows x86 arch:x86

    Password: 2024

    17c87c2ceba06a933957d5cd67f1cd22


    Headers

    Imports

    Sections

  • Zewx.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2024

    70a47e1e97f0e5b296f8049b37e6d7c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pyinstalltion/Bonjour.msi
    .msi
  • pyinstalltion/Bonjour64.msi
    .msi
  • pyinstalltion/addd.exe
    .exe windows:6 windows x64 arch:x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Code Sign

    Headers

    Imports

    Sections

  • pyinstalltion/apple_drive_x64/AppleKmdfFilter.sys
    .sys windows:10 windows x64 arch:x64

    04a5b8b105f8a53f38f94f773f024646


    Code Sign

    Headers

    Imports

    Sections

  • pyinstalltion/apple_drive_x64/AppleLowerFilter.sys
    .sys windows:10 windows x64 arch:x64

    07ccbfe67eba9199495650c284126769


    Code Sign

    Headers

    Imports

    Sections

  • pyinstalltion/apple_drive_x64/AppleUSB.cat
  • pyinstalltion/apple_drive_x64/AppleUsb.inf
  • pyinstalltion/apple_drive_x64/AppleUsbFilter.dll
    .dll windows:10 windows x64 arch:x64

    39816329d73b7cea93d865b37b296806


    Headers

    Imports

    Exports

    Sections

  • pyinstalltion/apple_drive_x64/appleusb.PNF
  • pyinstalltion/drivers/usbfilter/WeTestUsbFilter.inf
  • pyinstalltion/drivers/usbfilter/WeTestUsbFilter.sys
    .sys windows:10 windows x64 arch:x64

    345f2dffb441f8e660fa603ae03f7b86


    Headers

    Imports

    Sections

  • pyinstalltion/drivers/usbfilter/wetestusbfilter.cat
  • pyinstalltion/drivers/win10/WeTestUsbNcm.inf
  • pyinstalltion/drivers/win10/WeTestUsbNcm.sys
    .sys windows:10 windows x64 arch:x64

    ba1305a7fb6eaaa67850480953f32adc


    Headers

    Imports

    Sections

  • pyinstalltion/drivers/win10/wetestusbncm.cat
  • pyinstalltion/drivers/win11/WeTestUsbNcm.inf
  • pyinstalltion/drivers/win11/WeTestUsbNcm.sys
    .sys windows:10 windows x64 arch:x64

    85a1369aa1d491c4e069723f84098058


    Headers

    Imports

    Sections

  • pyinstalltion/drivers/win11/wetestusbncm.cat
  • pyinstalltion/install-filter-64.exe
    .exe windows:5 windows x64 arch:x64

    9bfd22ddc495904c066b8b59009a138b


    Code Sign

    Headers

    Imports

    Sections

  • pyinstalltion/install-filter.exe
    .exe windows:6 windows x64 arch:x64

    3b8e21d0ca9e681f73ead7358914e2f2


    Code Sign

    Headers

    Imports

    Sections

  • pyinstalltion/iosdriver/AppleKmdfFilter.sys
    .sys windows:10 windows x64 arch:x64

    04a5b8b105f8a53f38f94f773f024646


    Headers

    Imports

    Sections

  • pyinstalltion/iosdriver/AppleLowerFilter.sys
    .sys windows:10 windows x64 arch:x64

    07ccbfe67eba9199495650c284126769


    Headers

    Imports

    Sections

  • pyinstalltion/iosdriver/AppleUSB.cat
  • pyinstalltion/iosdriver/AppleUsb.inf
  • pyinstalltion/iosdriver/AppleUsbFilter.dll
    .dll windows:10 windows x64 arch:x64

    39816329d73b7cea93d865b37b296806


    Headers

    Imports

    Exports

    Sections

  • pyinstalltion/iosdriver/appleusb.PNF
  • pyinstalltion/libusb_drive_x64/libusb0.dll
    .dll windows:6 windows x64 arch:x64

    eae5e3d8124867fcc1b4265dbecb5d87


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pyinstalltion/libusb_drive_x64/libusb0.sys
    .sys windows:6 windows x64 arch:x64

    f771fcc2fe54680d21562f599db14975


    Code Sign

    Headers

    Imports

    Sections

  • pyinstalltion/libusb_drive_x64/libusbK.dll
    .dll windows:6 windows x64 arch:x64

    f1796394f852078b356d48d573a3cd09


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pyinstalltion/libusb_drive_x64/libusbK.sys
    .sys windows:6 windows x64 arch:x64

    222c03bec3836ed94b73b28fa09ec3b1


    Code Sign

    Headers

    Imports

    Sections

  • pyinstalltion/ncinstall.exe
    .exe windows:6 windows x86 arch:x86

    39dad16f0404705d6c3bb45bb3b54484


    Code Sign

    Headers

    Imports

    Sections

  • pyinstalltion/ncmdriver/applencm.cat
  • pyinstalltion/ncmdriver/applencm.inf
  • pyinstalltion/ncmdriver/applencm.sys
    .sys windows:6 windows x64 arch:x64

    e24e14f353a32caaa8ba19404991c564


    Code Sign

    Headers

    Imports

    Sections

  • xenon.dll
    .dll windows:6 windows x86 arch:x86

    43287f32e985e3ffba23e9da46811e56


    Code Sign

    Headers

    Imports

    Exports

    Sections