General

  • Target

    Soggfy-2.7.3.zip

  • Size

    443KB

  • MD5

    608bea798f0138b782887964dba670d1

  • SHA1

    1fd7e62c718a894affb3a29ce4f1b8d486772bc4

  • SHA256

    b5817f1f083c34340a84792c26f173416429ed3640626a32c3a031c9898e036b

  • SHA512

    915590f344acef0b05b259021c86ae4c797e28d89d85bcfc39e6d23ee7cf70bfe5b706041b035f5b9461135ae8ca113d1186a1fa3228a14297eec7013f21679b

  • SSDEEP

    12288:K2Aceq2YNRZ9ADLeOG7IvSaIM3wNlvU5e/7Zt:EdqJ8DLRG70/pwfwiX

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://upgrade.scdn.co/upgrade/client/win32-x86/spotify_installer-1.2.31.1205.g4d59ad7c-1561.exe

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Soggfy-2.7.3.zip
    .zip
  • Install.cmd
  • Install.ps1
    .ps1
  • Release/Injector.exe
    .exe windows:6 windows x86 arch:x86

    797ae20d912e2d5c2ff9c8059818b0fd


    Headers

    Imports

    Sections

  • Release/SoggfyUIC.js
    .js
  • Release/SoggfyUIC.js.map
  • Release/SpotifyOggDumper.dll
    .dll windows:6 windows x86 arch:x86

    8d05392a9df431a8bcb1638202add86d


    Headers

    Imports

    Sections

  • Uninstall.cmd