General

  • Target

    thunder1 (9).zip

  • Size

    12.4MB

  • MD5

    31a6df952f1409cb91b62cb440fc9623

  • SHA1

    b106a2a00bccb50225074ab27e13d3a7e37da49a

  • SHA256

    1d52e49eac445287d31fd052e2a5afe69ebb1942d8c2ced4b114caa1c0a41251

  • SHA512

    678caf53f9b7ea408bd85c033a1e89ae8853d92c0299ab8dcbab96f8442c67f5a247d3e214d088aa96860c0fe05eb7d604b96bb4939b4dfc10dfed6b8e74c440

  • SSDEEP

    196608:CUjj9Tt1JmTwsfzRXDowDsY9qzRK5c2TSiksjhFyIzc+hZUR4tOM6FrFB1vmfcfm:7dfJQwAlh4K5cMSPsjDhzc+Qjn2LX

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • thunder1 (9).zip
    .zip
  • dos.ahk
  • dos.exe
    .exe windows:5 windows x86 arch:x86

    c07a5e2247b48b561b9ee6a9e632f518


    Headers

    Imports

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • onzyxy.nn
    .dll windows:6 windows x86 arch:x86

    e2af3f189526289f48da3e08f1282975


    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections