General

  • Target

    cibfts (1).rar

  • Size

    912KB

  • MD5

    ee6ddecf17318eb513fdee1c0b831e43

  • SHA1

    cab714cbcbb90657c36cbc38523c91694fea2bd7

  • SHA256

    d87f723d17e0397593ea7560d6a0938e25cddcbc77b9128b90f8a1c871665ef8

  • SHA512

    5bdf541ea74dcb8a2d60be015ee67aa134f6be5f41ebf76c6d768aa3914e61938396371b5ffaa6e54086381e0f1937fa9299da36404e79baa15d68c275f72ab3

  • SSDEEP

    24576:+5R5BbqQPYE9vKVHLMGkBvwDgcPUu9eF3NRuLj:+5P4cYE9vKVHgGkBUdsxZNRun

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cibfts (1).rar
    .rar
  • equil/Equil.exe
    .exe windows:6 windows x64 arch:x64

    ba1e04e80b12fc5437e287e3e7325469


    Headers

    Imports

    Sections

  • equil/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    047aec27169fe21274a3b2f2f30606c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • equil/msvcp140d.dll
    .dll windows:6 windows x64 arch:x64

    6e850cc85d0fa7af97f518595d72098c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • equil/stupidthing200.exe
    .exe windows:6 windows x64 arch:x64

    59851f0c035d350aafd142f84b9f1939


    Headers

    Imports

    Sections

  • equil/ucrtbased.dll
    .dll windows:10 windows x64 arch:x64

    f2aadd973a962f5880d384677f106ac3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • equil/vcruntime140_1d.dll
    .dll windows:6 windows x64 arch:x64

    419be101e74913240f42cba69b97048a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • equil/vcruntime140d.dll
    .dll windows:6 windows x64 arch:x64

    1609bcdc73a457adf6343faf5db7ffa0


    Code Sign

    Headers

    Imports

    Exports

    Sections