General

  • Target

    83af52150d2c570afc1d3e9db129e2a9d8de70dada92366780e0a52c7fd74b95

  • Size

    19.0MB

  • MD5

    a829e15534ad584c18cb8094bf13bea8

  • SHA1

    586a45f824ab2db33a88809b7de49ce2a2093bc2

  • SHA256

    83af52150d2c570afc1d3e9db129e2a9d8de70dada92366780e0a52c7fd74b95

  • SHA512

    72a9cc9775fef5130c886f7fcee4164f99dabc348b7a2cf8ae942d6179f916a97de96e05d4dab3383388a6efba8ea1ae1412f3c7ff1a7718eb4478b48db4b3a8

  • SSDEEP

    393216:leUQyto5X78AGrGkq/PiXOuOAXsURQnlUYJjhUDr5M6rh6Jy6P:lKCMX7vDkq/Pi+CXmlUuKr5Mhy6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 83af52150d2c570afc1d3e9db129e2a9d8de70dada92366780e0a52c7fd74b95
    .rar
  • RoweHack/Lunar.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RoweHack/Oni.dll
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • RoweHack/Oni.runtimeconfig.json
  • RoweHack/RoweHack.exe
    .exe windows:6 windows x86 arch:x86

    9c7649e277995f91579a552a896e22fd


    Headers

    Imports

    Sections

  • RoweHack/bin/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    7164b225185485aa67b055730bc2f969


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoweHack/bin/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    01c801a34c4715440ef1f25ad689b315


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoweHack/bin/onih.dll
    .dll windows:6 windows x64 arch:x64

    e3a21ed8205609de2593dd259b21f291


    Headers

    Imports

    Sections