Static

static

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Loader.rar

  • Size

    10.6MB

  • MD5

    54482efd3785972c314ba22f6c2b034b

  • SHA1

    6487f71246a7d2062147bfade69a2fbbf85074b0

  • SHA256

    55391d8022ebe5afba9608bb88ab45217e2bd6d4e13e0a8d4da81a0dfafd5690

  • SHA512

    e632eeebff716f0f4490e9d537f29eba4ff12f62e419525f7c0f3c4e1dfc08bec3ed35b919f4c31e95447a140dd76e1bde729f482258bd1434085ae049d17273

  • SSDEEP

    196608:N/1nNv65MfEyysugJV318Q8bgd+xSshWU0A8wyH9Zo8eUIJXeyRm7cZGOLRNp:NtZWM9RJV3OQGxDWUiJ/SJuy6KLRv

Score
7/10
upxthemida

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Loader.rar
    .rar

    Password: 123

  • Loader/Check Me First/install First.bat
  • Loader/Copy The inside files to USB And boot it/EFI/Boot/bootx64.efi
    .dll windows:0 windows x64 arch:x64


    Headers

    Sections

  • Loader/Copy The inside files to USB And boot it/EFI/Boot/startup.nsh
  • Loader/Copy The inside files to USB And boot it/NoUSB.exe
    .exe windows:6 windows x64 arch:x64

    Password: 123


    Headers

    Sections

  • Loader/Copy The inside files to USB And boot it/avm.efi
    .exe windows:0 windows x64 arch:x64

    Password: 123


    Headers

    Sections

  • Loader/Discord.exe
    .exe windows:6 windows x64 arch:x64

    Password: 123


    Headers

    Sections