General

  • Target

    01-06-2024_YKK69exTwLdFPLp.rar

  • Size

    29KB

  • MD5

    f5d75f0a47bb91ee4671a5a06b725bd1

  • SHA1

    509697e1cd8a414d29357c3f60d59e23129aaf79

  • SHA256

    f8d5089388f4a0d26f4e3db0c7159bb35ee53a1bc7884c8e856467c9bc8d5193

  • SHA512

    931b1a07be91e659c285e8d108508ea30ff4a57e46187119d4130011ed63b73a57e0ab16da54c5bbb1e575901100ce7d5d237b9b87ad4e7ecf537c2fd614ae8e

  • SSDEEP

    768:09zHrnWv0hEBwLzm8X4erAZOpmBAl7meg6:09zHrg0eozB4zZmmBAl7meg6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 01-06-2024_YKK69exTwLdFPLp.rar
    .rar
  • 01-06-2024_YKK69exTwLdFPLp/TFGhost v3.1_CHEATER.FUN/TFGhost/CHEATER.FUN.url
  • 01-06-2024_YKK69exTwLdFPLp/TFGhost v3.1_CHEATER.FUN/TFGhost/DirtyBypassInjector.exe
    .exe windows:6 windows x86 arch:x86

    cef21ba936b55b36bb0c38e087af470a


    Headers

    Imports

    Sections

  • 01-06-2024_YKK69exTwLdFPLp/TFGhost v3.1_CHEATER.FUN/TFGhost/TFGhost.exe
    .exe windows:6 windows x64 arch:x64

    cf293edc3c572e605dcfd9aea0cbf54b


    Headers

    Imports

    Sections