General

  • Target

    all.rar

  • Size

    34.7MB

  • MD5

    7c443e1a965228e3745770da88d136df

  • SHA1

    61a1e61233eb2d5942f8358fc42e56317ca9a5b3

  • SHA256

    d0feb009fd13bb54b000579db2a99be3daf83bbd087f5fdef0a6560fa18cae54

  • SHA512

    225b64732d618d17cdd37f9d4f52b296cd5b7e902782661739036e6b9d35e067ac47466b92d660b494311b47e1de20c0712d38004ae6184e9957d710c21f8dc0

  • SSDEEP

    786432:AS5IlXgR4jdjFmbw/DOQs9oHUw0XiPk+nNlgf2HE5aq7IXa:A99mbw/DG9eIkNfyaE

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • all.rar
    .rar
  • all/Grabbers-Deobfuscator-main.zip
    .zip
  • Grabbers-Deobfuscator-main/.gitignore
  • Grabbers-Deobfuscator-main/README.md
  • Grabbers-Deobfuscator-main/config.json
  • Grabbers-Deobfuscator-main/deobf.py
  • Grabbers-Deobfuscator-main/methods/ben.py
  • Grabbers-Deobfuscator-main/methods/blank.py
  • Grabbers-Deobfuscator-main/methods/empyrean.py
  • Grabbers-Deobfuscator-main/methods/luna.py
  • Grabbers-Deobfuscator-main/methods/notobf.py
  • Grabbers-Deobfuscator-main/methods/other.py
  • Grabbers-Deobfuscator-main/requirements.txt
  • Grabbers-Deobfuscator-main/tutorial.gif
    .gif
  • Grabbers-Deobfuscator-main/utils/bin/fernflower.jar
    .jar
  • Grabbers-Deobfuscator-main/utils/bin/pycdas
    .elf linux x64
  • Grabbers-Deobfuscator-main/utils/bin/pycdas.exe
    .exe windows:6 windows x64 arch:x64

    a0b986748fb3b79f1afa27913520271f


    Headers

    Imports

    Sections

  • Grabbers-Deobfuscator-main/utils/bin/pycdc
    .elf linux x64
  • Grabbers-Deobfuscator-main/utils/bin/pycdc.exe
    .exe windows:6 windows x64 arch:x64

    8933a45a4654b688012d7770158aef33


    Headers

    Imports

    Sections

  • Grabbers-Deobfuscator-main/utils/bin/upx
    .elf linux x64
  • Grabbers-Deobfuscator-main/utils/bin/upx.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Grabbers-Deobfuscator-main/utils/config.py
  • Grabbers-Deobfuscator-main/utils/decompile.py
  • Grabbers-Deobfuscator-main/utils/deobfuscation.py
  • Grabbers-Deobfuscator-main/utils/display.py
  • Grabbers-Deobfuscator-main/utils/download.py
  • Grabbers-Deobfuscator-main/utils/pyaes/__init__.py
  • Grabbers-Deobfuscator-main/utils/pyaes/aes.py
  • Grabbers-Deobfuscator-main/utils/pyaes/blockfeeder.py
  • Grabbers-Deobfuscator-main/utils/pyaes/util.py
  • Grabbers-Deobfuscator-main/utils/pyinstaller/extractors/pyinstxtractor.py
  • Grabbers-Deobfuscator-main/utils/pyinstaller/extractors/pyinstxtractorng.py
  • Grabbers-Deobfuscator-main/utils/pyinstaller/pyinstaller.py
  • Grabbers-Deobfuscator-main/utils/pyinstaller/pyinstallerExceptions.py
  • Grabbers-Deobfuscator-main/utils/telegram.py
  • Grabbers-Deobfuscator-main/utils/webhookspammer.py
  • all/python-3.12.3-amd64.exe
    .exe windows:6 windows x86 arch:x86

    f57d7a40ebfca87e6f8082251d937ed8


    Code Sign

    Headers

    Imports

    Sections

  • all/winrar-x64-701.exe
    .exe windows:6 windows x64 arch:x64

    39da3cace27ab9503fa46001ce968ea6


    Code Sign

    Headers

    Imports

    Sections