General

  • Target

    Identification.zip

  • Size

    25.6MB

  • MD5

    81a8d1aec1c222d299f86e335fafa9d6

  • SHA1

    1a5698eb1eafa774a4dc052f9a850108b803722a

  • SHA256

    2157072af6f4da1dd6b39cb2019c9d253b802e25a3ee8162697c4a618516f25c

  • SHA512

    8e54082db03b289e57754331ac82f40ecc779df711e28eb2ee1f821797cef589abf7e83ed9e620da8f1eab879af916186b803f4ae27ce8faa4956a706b6b3351

  • SSDEEP

    786432:lON+4XFvlw0Tdw9wPUpkkoqbTiDkFLLx9KX6lplASGgMaDU3goioY2:lK+4X00Td4wPUpJ9KXA7hMaDU3+oR

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Identification.zip
    .zip

    Password: 159

  • Identification/Identification.exe
    .exe windows:4 windows x64 arch:x64

    Password: 159

    f56783607eab1cd4f10c2a8f7aea6d04


    Headers

    Imports

    Sections

  • Identification/_asyncio.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 159

    4e35d4f382a6e5820e4db9b220964fe1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/_bz2.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 159

    a36962884764276bb35985709aa4e40d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/_cffi_backend.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 159

    8f8d662a942cad4ff1001cad6ca84431


    Headers

    Imports

    Exports

    Sections

  • Identification/_ctypes.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 159

    c7e678778370beefa2be60d7f0444c52


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/_decimal.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 159

    b4bc8290ce36e458b7f80d6ab6e100dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/_hashlib.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 159

    a8173ef8679f8544a88e355945112c77


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/_lzma.pyd
    .dll windows:6 windows x64 arch:x64

    Password: 159

    b865edd9b0c291111893fc2b523f7264


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/_multiprocessing.pyd
    .dll windows:6 windows x64 arch:x64

    9ff0f8f78fa8876d3d00f9ec2aa78b75


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/_overlapped.pyd
    .dll windows:6 windows x64 arch:x64

    1f6b0816935b9dea5ee9898c98097635


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/_queue.pyd
    .dll windows:6 windows x64 arch:x64

    efe3e840cb4904222351e9b7f17afea3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/_socket.pyd
    .dll .js windows:6 windows x64 arch:x64 polyglot

    de62106114a70bb3c0dfb5c6513e0ba1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/_ssl.pyd
    .dll windows:6 windows x64 arch:x64

    13fce691387104194c39d61bca67aa4e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/_uuid.pyd
    .dll windows:6 windows x64 arch:x64

    c2ef50d1f8f9a12aa6ad60689f8e919b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/_wmi.pyd
    .dll windows:6 windows x64 arch:x64

    7e3fdc8d0eb0570a9b19a000cd6e731d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/certifi/cacert.pem
  • Identification/charset_normalizer/md.pyd
    .dll windows:6 windows x64 arch:x64

    f9f58fd722dea53fe5b29a3d6dba9a29


    Headers

    Imports

    Exports

    Sections

  • Identification/charset_normalizer/md__mypyc.pyd
    .dll windows:6 windows x64 arch:x64

    facfc5ec70708b6566f37401fb8a64c6


    Headers

    Imports

    Exports

    Sections

  • Identification/cryptography/hazmat/bindings/_rust.pyd
    .dll windows:6 windows x64 arch:x64

    f25753a267a2aa590a319e2af4465b8b


    Headers

    Imports

    Exports

    Sections

  • Identification/libcrypto-3.dll
    .dll windows:6 windows x64 arch:x64

    40bce6a23883072a66c68006f08e105c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/libffi-8.dll
    .dll windows:6 windows x64 arch:x64

    3dc8b86d60f90a1851eee5f9dc191312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/libssl-3.dll
    .dll windows:6 windows x64 arch:x64

    dc44c25ab05f2ed83d242e885f9b4799


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/multidict/_multidict.pyd
    .dll windows:6 windows x64 arch:x64

    ab164bcfbcacde7d4dde43fe084e0c89


    Headers

    Imports

    Exports

    Sections

  • Identification/pyexpat.pyd
    .dll windows:6 windows x64 arch:x64

    cf5b5f91e5aeac3c5953a0b69a300283


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/python3.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Identification/python312.dll
    .dll windows:6 windows x64 arch:x64

    5a22bd40d1b845990102286d0fb385f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/select.pyd
    .dll windows:6 windows x64 arch:x64

    e41677fc9cd5514cd954ce2ce19e425c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/unicodedata.pyd
    .dll windows:6 windows x64 arch:x64

    a3519e9a1b69560ea1c5fe43fd626ac5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Identification/yarl/_quoting_c.pyd
    .dll windows:6 windows x64 arch:x64

    0b8e6d85c57a407746d9e4d19362ad97


    Headers

    Imports

    Exports

    Sections

  • Identification/zstandard/_cffi.pyd
    .dll windows:6 windows x64 arch:x64

    a4f663bc77d2671c859ff6226656a2fb


    Headers

    Imports

    Exports

    Sections

  • Identification/zstandard/backend_c.pyd
    .dll windows:6 windows x64 arch:x64

    632b1925db83ff52d517ea5b3c13142f


    Headers

    Imports

    Exports

    Sections