General

  • Target

    decompiler for malware.zip

  • Size

    37.5MB

  • MD5

    f89d13a2c21bb13d9647b725088d9b0e

  • SHA1

    af0bc6c68ee081814cdec903cf7c13b2fd928388

  • SHA256

    e1e0202ed70728c18077c741719051850316f70e1deb0558ab9551d664c53f00

  • SHA512

    4fcfbee8fa3b1590cbd5157bb1badb180a0ac305fa6a575055a2564d807527ff75ea7afb4a7c4b44c67d0f9356dd3bbe1788d1869a5a6a5f75062e178f5e2ee7

  • SSDEEP

    786432:q1Bwj3f725no6e1+HU8uGnDhOLhDR1d010Mj8mTVuIXpGlxHTmns1/QdAiKerF:qjm3fH6e1+08pt+vg0UTVvZAxzICQao

Score
8/10

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Detects Pyinstaller 2 IoCs
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • decompiler for malware.zip
    .zip
  • Comet BETA.exe
    .exe windows:5 windows x64 arch:x64

    023abd09c65289e3a2df4aa2b19cccec


    Headers

    Imports

    Sections

  • ocofkso.pyc
  • GeFrost Exucutor.exe
    .exe windows:5 windows x64 arch:x64

    f4f2e2b03fe5666a721620fcea3aea9b


    Headers

    Imports

    Sections

  • creal.pyc
  • decompiler for malware/Grabbers-Deobfuscator-main/.gitignore
  • decompiler for malware/Grabbers-Deobfuscator-main/README.md
  • decompiler for malware/Grabbers-Deobfuscator-main/config.json
  • decompiler for malware/Grabbers-Deobfuscator-main/deobf.py
  • decompiler for malware/Grabbers-Deobfuscator-main/methods/ben.py
  • decompiler for malware/Grabbers-Deobfuscator-main/methods/blank.py
  • decompiler for malware/Grabbers-Deobfuscator-main/methods/empyrean.py
  • decompiler for malware/Grabbers-Deobfuscator-main/methods/luna.py
  • decompiler for malware/Grabbers-Deobfuscator-main/methods/notobf.py
  • decompiler for malware/Grabbers-Deobfuscator-main/methods/other.py
  • decompiler for malware/Grabbers-Deobfuscator-main/requirements.txt
  • decompiler for malware/Grabbers-Deobfuscator-main/tutorial.gif
    .gif
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/bin/fernflower.jar
    .jar
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/bin/pycdas
    .elf linux x64
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/bin/pycdas.exe
    .exe windows:6 windows x64 arch:x64

    a0b986748fb3b79f1afa27913520271f


    Headers

    Imports

    Sections

  • decompiler for malware/Grabbers-Deobfuscator-main/utils/bin/pycdc
    .elf linux x64
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/bin/pycdc.exe
    .exe windows:6 windows x64 arch:x64

    8933a45a4654b688012d7770158aef33


    Headers

    Imports

    Sections

  • decompiler for malware/Grabbers-Deobfuscator-main/utils/bin/upx
    .elf linux x64
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/bin/upx.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • decompiler for malware/Grabbers-Deobfuscator-main/utils/config.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/decompile.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/deobfuscation.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/display.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/download.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/pyaes/__init__.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/pyaes/aes.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/pyaes/blockfeeder.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/pyaes/util.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/pyinstaller/extractors/pyinstxtractor.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/pyinstaller/extractors/pyinstxtractorng.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/pyinstaller/pyinstaller.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/pyinstaller/pyinstallerExceptions.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/telegram.py
  • decompiler for malware/Grabbers-Deobfuscator-main/utils/webhookspammer.py