Resubmissions

05/07/2024, 16:52

240705-vdsw1ssaqj 7

General

  • Target

    rege.zip

  • Size

    54.0MB

  • MD5

    a89b2cca0c9bcb3c5ef1478ed69a182b

  • SHA1

    bfaa78dd58dfe7ff18150043c5bdf4e048a81d6b

  • SHA256

    8ada6d73dc91084c02aefe7688e975f7e1db211ea7ed0b1cea39bdc7eaba268b

  • SHA512

    d4459dd50b809a1fa0518b164853c26d6459fb0fbb65f4a656571adcd162dcd40ba3c14fd1c9a4f403845c088cc66445c2766f3a35f5c6425d7b0a14732dc0ee

  • SSDEEP

    1572864:tgMs2cZz2/IRC5R1yUkgn2Tdp2/IRC1Q3ZT1OFGdQPM:t9sZC/PRl2u/43Z8M

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • rege.zip
    .zip
  • bypass.exe
    .exe windows:6 windows x64 arch:x64

    66b10d8b5718b0fd6fb4865843d44280


    Headers

    Imports

    Exports

    Sections

  • httpsmix.exe
    .exe windows:6 windows x86 arch:x86

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections

  • httpsraw.exe
    .exe windows:6 windows x64 arch:x64

    4d0fb8dc9ee470058274f448bebbb85f


    Headers

    Imports

    Exports

    Sections

  • proxy.txt
  • python.exe
    .exe windows:5 windows x64 arch:x64

    5bc16b5845145eb0edb88983820691b1


    Headers

    Imports

    Sections

  • d.pyc
  • tlsv.exe
    .exe windows:6 windows x64 arch:x64

    4d0fb8dc9ee470058274f448bebbb85f


    Headers

    Imports

    Exports

    Sections

  • ua.txt