Resubmissions

29/06/2024, 02:47

240629-daagtszakd 7

General

  • Target

    Khorvie TR.zip

  • Size

    9.2MB

  • MD5

    6509d8c118b7abead8b8851fcb2ed357

  • SHA1

    9fa35d32f72780098167a24e2647b1f7c0b75379

  • SHA256

    0625905030c0c5998225f261cca39fd169216de8542c1e1e6ad34c9f1192b362

  • SHA512

    e86c29fd52d3e835635a3f7b7a4df719f7b31a08dfd5c4defd02fbc7678a7a23c4be47b7bd1d7f6bc230a3a8c638237e21f249443f4998586ddf551d722f2543

  • SSDEEP

    196608:jqx+qSjalEts4a2VlGWGwFC3R0QXFPxIe8DsGwvE25qkbeQ6zOjmg:jqwK4s4ZEvwYzVPae+zK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Khorvie TR.zip
    .zip
  • Amit Timer Res/1 fix/1.reg
  • Amit Timer Res/2 program/MeasureSleep.exe
    .exe windows:6 windows x64 arch:x64

    11f2665eaaaf2de7cb4e3312fbfeab4a


    Headers

    Imports

    Sections

  • Amit Timer Res/2 program/SetTimerResolution.exe
    .exe windows:6 windows x64 arch:x64

    c1c671ec492bcf13ef9a966821b522cb


    Headers

    Imports

    Sections

  • Amit Timer Res/2 program/bench.ps1
    .ps1
  • Amit Timer Res/3 powershell/Prime95/libcurl-x64.dll
    .dll windows:6 windows x64 arch:x64

    76b44a61d1fa1791259b77cf5efbfa43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Amit Timer Res/3 powershell/Prime95/libgmp-gw1.dll
    .dll windows:4 windows x64 arch:x64

    8c7592704133eab82dcbffc35f77efa8


    Headers

    Imports

    Exports

    Sections

  • Amit Timer Res/3 powershell/Prime95/libhwloc-15.dll
    .dll windows:4 windows x64 arch:x64

    1b7682c2168a4f10abf95ed8d159ffa3


    Headers

    Imports

    Exports

    Sections

  • Amit Timer Res/3 powershell/Prime95/prime.txt
  • Amit Timer Res/3 powershell/Prime95/prime95.exe
    .exe windows:6 windows x64 arch:x64

    3ac2b20ee4e4ebacafad091010891a2a


    Headers

    Imports

    Exports

    Sections

  • Amit Timer Res/3 powershell/Prime95/results.txt
  • Amit Timer Res/3 powershell/Windows PowerShell.lnk
    .lnk
  • Amit Timer Res/3 powershell/run this as admin.txt
  • Amit Timer Res/4 results/Plot.url
    .url
  • Amit Timer Res/4 results/Startup.lnk
    .lnk
  • Amit Timer Res/4 results/text document.txt