Overview

overview

3

Static

static

3

SucroseProxy.exe

windows7-x64

1

SucroseProxy.exe

windows10-2004-x64

1

sdkserver/...e.html

windows7-x64

1

sdkserver/...e.html

windows10-2004-x64

1

sdkserver/...t.html

windows7-x64

1

sdkserver/...t.html

windows10-2004-x64

1

sdkserver/...fig.js

windows7-x64

3

sdkserver/...fig.js

windows10-2004-x64

3

sdkserver/...ion.js

windows7-x64

3

sdkserver/...ion.js

windows10-2004-x64

3

sdkserver/...ken.js

windows7-x64

3

sdkserver/...ken.js

windows10-2004-x64

3

sdkserver/src/main.js

windows7-x64

3

sdkserver/src/main.js

windows10-2004-x64

3

sdkserver/...eld.js

windows7-x64

3

sdkserver/...eld.js

windows10-2004-x64

3

sdkserver/...oxy.js

windows7-x64

3

sdkserver/...oxy.js

windows10-2004-x64

3

sdkserver/src/util.js

windows7-x64

3

sdkserver/src/util.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FireflySR.rar

  • Size

    10.1MB

  • MD5

    61726558d9803f44d3ee0b96d5955661

  • SHA1

    3dd89e8dd9e0c9c72a16203cd61eef2b9985a1c9

  • SHA256

    f24168f7ed46cb5dc23b8d366ccd2f8bae802e76eb5299b5698f276cd0a555e5

  • SHA512

    4f60b7b070b21b8a17f999fdf302bdc3155cf2e243fdfbd42dcc17ddfa96a611be877290d49eca48a551a56b07b7b918f09edd673b576cc13f36d42c3f727aa6

  • SSDEEP

    196608:BOq/Cgrjhrm+okIKoxhypvpyKD0M8yU3stQEqT8e8goPLzksqh:BOnejhrmrkIHrcrA6UctA8e8gckjh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FireflySR.rar
    .rar
  • SucroseProxy.exe
    .exe windows:6 windows x64 arch:x64

    7d82737f015fa3a1a4cef33dc096d571


    Headers

    Imports

    Exports

    Sections

  • address.txt
  • dispatch.json
  • sdkserver/Cargo.toml
  • sdkserver/html/registration_page.html
    .html
  • sdkserver/html/registration_result.html
    .html
  • sdkserver/sdkserver.json
  • sdkserver/security/sdk_private_key.der
  • sdkserver/src/config.rs
    .js
  • sdkserver/src/database/account_collection.rs
    .js
  • sdkserver/src/database/combo_token.rs
    .js
  • sdkserver/src/database/mod.rs
  • sdkserver/src/main.rs
    .js
  • sdkserver/src/services/granter.rs
  • sdkserver/src/services/mdk_shield.rs
    .js
  • sdkserver/src/services/mod.rs
  • sdkserver/src/services/pages/mod.rs
  • sdkserver/src/services/pages/register.rs
  • sdkserver/src/services/reverse_proxy.rs
    .js
  • sdkserver/src/services/takumi_api.rs
  • sdkserver/src/util.rs
    .js