General

  • Target

    FuckXIA_Pass_Is_1.rar

  • Size

    61.7MB

  • MD5

    bdc42403a850bb336b9aebea7aa10522

  • SHA1

    7878b24329d88511e3d88adb87b5b6f157430f1f

  • SHA256

    4d5ef274dd43c0bb78ca06c9ba6d31e5369cceb711444eb3e2a47644e2a708b8

  • SHA512

    31061166b7f34709c3d628b6839c944173bb39cc2ba25214a7d1d47b58cb5adeee64e86406a842db21796427b6a5bb2e8bde1b75f4a21d109be0341868b81513

  • SSDEEP

    1572864:B5T+DEz/FF4XmgXaw+OYDYT19mJOgg6r30:Bd+aTgmQhWr30

Score
7/10

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • FuckXIA_Pass_Is_1.rar
    .rar

    Password: 1

  • XIA MOMENT/Clothing & Skin configs/clothes.json
  • XIA MOMENT/Clothing & Skin configs/skins.json
  • XIA MOMENT/Fifty Logins/Account.txt
  • XIA MOMENT/Images of them being clowns/ExcuseAndPureExitScam.png
    .png

    Password: 1

  • XIA MOMENT/Images of them being clowns/ExposedForBadware.png
    .png

    Password: 1

  • XIA MOMENT/Images of them being clowns/ExposedForBadwareV2.png
    .png

    Password: 1

  • XIA MOMENT/Images of them being clowns/ExposedForBadwareV3.png
    .png

    Password: 1

  • XIA MOMENT/Images of them being clowns/MochaAintGettingFixedLMAO.png
    .png

    Password: 1

  • XIA MOMENT/Images of them being clowns/SkiddedHysteriaFeaturePatched.png
    .png

    Password: 1

  • XIA MOMENT/Images of them being clowns/SkiddyXiaInjector.png
    .png

    Password: 1

  • XIA MOMENT/Images of them being clowns/closedhwidresetticket.png
    .png

    Password: 1

  • XIA MOMENT/Images of them being clowns/notCopingOverTato.png
    .png
  • XIA MOMENT/Images of them being clowns/notCopingOverTatoV2.png
    .png
  • XIA MOMENT/Images of them being clowns/notCopingOverTatoV3.PNG
    .png
  • XIA MOMENT/Images of them being clowns/notCopingOverTatoV4.png
    .png
  • XIA MOMENT/Images of them being clowns/spooferExitScam.png
    .png
  • XIA MOMENT/Xia's Programs & Shit/CumAuth.exe
    .exe windows:6 windows x64 arch:x64

    ff2ca35e9a85fb518383276d27a39490


    Headers

    Imports

    Exports

    Sections

  • XIA MOMENT/Xia's Programs & Shit/Exodus.proc.dll
    .dll windows:6 windows x64 arch:x64

    e7f4a5d23f90e4ac562d49d3950050aa


    Headers

    Imports

    Sections

  • XIA MOMENT/Xia's Programs & Shit/LatteLoader.proc.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • XIA MOMENT/Xia's Programs & Shit/MacchiatoPaidTempSpafer.exe
    .exe windows:6 windows x64 arch:x64

    b6d09782982f9aa0bf002baa8f52a6c9


    Headers

    Imports

    Exports

    Sections

  • XIA MOMENT/Xia's Programs & Shit/OrangeRemover_protected_1.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections