Overview

overview

3

Static

static

3

thunderfuck/spoof.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ss.rar

  • Size

    7.4MB

  • MD5

    52e6127b37f198406479899f614c30d5

  • SHA1

    596b77c6620a35e4e278c2dbf68f55158d1616d6

  • SHA256

    6572a87ca39a7d73426c03d044bd7dc7ab4ce166fb115fdfd00df555df934019

  • SHA512

    3d75cddb5e0d8354d00118609b1a035e93361ab76c139a8515167f6ee77420051d213c16d54f5275da58d046009fbea01005109b52d8ca4292d2c70a87387ee1

  • SSDEEP

    196608:3ciahzxXcte3qXGa2kkRcsP3mBCCKpZPn1nzra:E513UGa2kkTP3QCzpZPn1ny

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ss.rar
    .rar
  • thunderfuck/README.md
  • thunderfuck/go.mod
  • thunderfuck/go.sum
  • thunderfuck/main.go
  • thunderfuck/main_gui.go
  • thunderfuck/powershellstuff/SysInfo.ps1
    .ps1
  • thunderfuck/powershellstuff/defenderstuff.ps1
  • thunderfuck/spoof.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • thunderfuck/utils/antidbgandvm/antidebugandvm.go
  • thunderfuck/utils/browsers/browsers.go
  • thunderfuck/utils/browsers/conn.go
  • thunderfuck/utils/browsers/cookies.go
  • thunderfuck/utils/browsers/creditcard.go
  • thunderfuck/utils/browsers/crypto.go
  • thunderfuck/utils/browsers/decrypt.go
  • thunderfuck/utils/browsers/downloads.go
  • thunderfuck/utils/browsers/history.go
  • thunderfuck/utils/browsers/logins.go
  • thunderfuck/utils/browsers/masterkey.go
    .js
  • thunderfuck/utils/browsers/paths.go
  • thunderfuck/utils/browsers/structs.go
  • thunderfuck/utils/defender/defender.go
  • thunderfuck/utils/disablefactoryreset/factoryresetdisable.go
  • thunderfuck/utils/exclude/exclude.go
  • thunderfuck/utils/fakeerror/fakeerror.go
    .js
  • thunderfuck/utils/hideconsole/hideconsolewindow.go
  • thunderfuck/utils/powershellpatcher/patcher.go
    .ps1
  • thunderfuck/utils/taskmanager/taskmgrdisable.go
  • thunderfuck/utils/telegramsend/send_to_api.go
  • thunderfuck/utils/telegramsend/send_to_telegram.go