Resubmissions

28/06/2024, 10:26

240628-mgq8laxbrp 8

28/06/2024, 07:49

240628-jnnt9syckc 8

General

  • Target

    ElementB3.exe.zip

  • Size

    25.0MB

  • MD5

    72ea9ce44937b3ced6ad18f40d9d3cc5

  • SHA1

    3d53296f82dbafd92d05703b73bb6d60134ead7c

  • SHA256

    c9a1cec2386a33103e306873431058ec9112613c2e8ca72ccfb754da33e5578e

  • SHA512

    ced438ec435aaac50447bf733fc6d40f5fe050c7e0626592239bd4edb1051b512cfb60da00c62748a4e65b675d0c9fb4bb4e7e2be765174b7cf1eab26b0abcec

  • SSDEEP

    786432:3rkx8hvYpziehax7uXoPeqDlGA87lyy9WoVDQAGD:b/Y0ehaIXoP387Dpm/D

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • ElementB3.exe.zip
    .zip
  • ElementExecuter/Element.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ElementExecuter/ElementAPI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ElementExecuter/Executer.exe
    .exe windows:4 windows x64 arch:x64

    a15389e7a3e3d8aabef3d1422091a217


    Code Sign

    Headers

    Imports

    Sections

  • ElementExecuter/avrora.exe.config
  • ElementExecuter/avrora.pdb
  • ElementExecuter/bin/CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    fe78118d64d767d704fee2343d26ea59


    Headers

    Imports

    Exports

    Sections

  • ElementExecuter/bin/CeleryInjector.exe
    .exe windows:6 windows x64 arch:x64

    32a832ab43a8e8ab30ef0bf83732a6d0


    Headers

    Imports

    Sections

  • ElementExecuter/bin/ver.txt