General

  • Target

    ac428b00d54b184cfa89f0942378e4b1.bin

  • Size

    3.2MB

  • MD5

    ac428b00d54b184cfa89f0942378e4b1

  • SHA1

    3ab8161bc852377b9a66992db25dc0dc5b5076e0

  • SHA256

    0a46b25f38ca3cb17440d703c2ffc9ad47d89432b146571ec2d368b50eca5c70

  • SHA512

    831275c3cc9892cef9d0ff64546d9c65164a878668786fff658b53830e71b1e421e0a98c10974c511512f28a010d0e0bd3aeee49dc62f11b9e7ccf88c8811066

  • SSDEEP

    98304:mQaWXBELrQV4fpsOQWBPcGG/cH1U9CKIPrGB1H:paW2HpfeRWBPc7cHKey1H

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ac428b00d54b184cfa89f0942378e4b1.bin
    .rar
  • babama_yazma/Kulo Proxy.exe
    .exe windows:6 windows x64 arch:x64

    ff01388c0e69bff878cb1c6164692cba


    Headers

    Imports

    Sections

  • babama_yazma/kulo_banner.rttex
  • babama_yazma/kulo_btn.rttex
  • babama_yazma/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    be8998f097fb76449be2b5db9405c2cc


    Headers

    Imports

    Exports

    Sections

  • babama_yazma/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    6f5ad8788601f62c7a3e511279f33281


    Headers

    Imports

    Exports

    Sections

  • babama_yazma/loadrttex.bat