General

  • Target

    Korium Client (1).zip

  • Size

    38.8MB

  • MD5

    0663aba7c061608368ede90a620ab396

  • SHA1

    2a79b34218b12372832d30e166404cac671e6ef3

  • SHA256

    542fdda66688d3878b1de714abd5abf62afa88ed82a08bbd80c2ed79c009fda7

  • SHA512

    47165521e1863231416efc98c6f4938e917a51c8e8be4c2b65aa999e665f601c3b3e0fdf0ed97d7afe95e62047b3c754046edaa67e129fae4dce3946be4fbe3b

  • SSDEEP

    786432:b0NOVOENxB+NNDrr/qcklsb6ybBNkPbXG/xQHg3sI2DSUKfjj0SdjpjP9OhwOy:b3nNxBgNDC8nbBcG/6Hg3WDoPcw7

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Korium Client (1).zip
    .zip
  • Korium Client/CefSharp.Core.Runtime.pdb
  • Korium Client/CefSharp.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Korium Client/CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Korium Client/Korium.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections

  • Korium Client/Microsoft.Bcl.AsyncInterfaces.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Korium Client/chrome_100_percent.pak
  • Korium Client/chrome_200_percent.pak
  • Korium Client/chrome_elf.dll
    .dll windows:10 windows x64 arch:x64

    102416632d8fb8249793faa959295bbe


    Headers

    Imports

    Exports

    Sections

  • Korium Client/data/settings.json
  • Korium Client/debug.log
  • Korium Client/dist/server/index.js
    .js
  • Korium Client/dist/shared/bin/en-us.json
  • Korium Client/dist/shared/bin/globalTypes.d.luau
  • Korium Client/dist/shared/bin/wave-luau.exe
    .exe windows:6 windows x64 arch:x64

    b2fc95c542fb90d737ddd4fd228430ed


    Headers

    Imports

    Sections

  • Korium Client/dist/shared/bin/wave.d.luau
  • Korium Client/dist/shared/configuration/default.json
  • Korium Client/dist/shared/en-us.json
  • Korium Client/dist/shared/globalTypes.d.luau
  • Korium Client/dist/shared/themes/oneDark.json
  • Korium Client/dist/shared/wave-luau.exe
    .exe windows:6 windows x64 arch:x64

    b2fc95c542fb90d737ddd4fd228430ed


    Headers

    Imports

    Sections

  • Korium Client/dist/shared/wave.d.luau
  • Korium Client/dist/start.cmd
  • Korium Client/dxcompiler.dll
    .dll windows:10 windows x64 arch:x64

    86379d9f4693f2aa059197611ab2ffc7


    Headers

    Imports

    Exports

    Sections

  • Korium Client/dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Korium Client/icudtl.dat
  • Korium Client/korium.dll
    .dll windows:6 windows x64 arch:x64

    5f1988dd053a64d4ce09004bcc3d1a55


    Headers

    Imports

    Sections

  • Korium Client/websocket-sharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections