OTPBOT[.]rar | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
OTPBOT.rar
Size 16.3MB
Sample240717-e3x92aydne
SHA256 6b21c5b53198967f49dda5d8b79e06bfd1ac72ca4c362bbdbc7a58cf2a5de9af
MD5 4d4e496a1767ff35798fa6dcb62020c6
SHA1 c4a6abb07705d6fdecdcd126bc60b7dc6617f8f0
SHA512 5d1f66b5e1df4e019fa14564cf477e0cc105c2a9611b7807c7e2444782f6183ce97828f980b08856268634ed4f946af1b0d4f94d99780445864aeef7645fdab2
SSDEEP 393216:9m3jAlqrWUIyB1mdnKQO5dEhLN8DDifhAz90hXIPoO8I/n:qrdII1mhKfghLNfEOGPosf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/OTPBOT.exe

File Explorer

OTPBOT.rar

.rar 16.3MB
OTPBOT.exe

.exe 16.7MB

OTPBOT.rar

SHA256 6b21c5b53198967f49dda5d8b79e06bfd1ac72ca4c362bbdbc7a58cf2a5de9af
MD5 4d4e496a1767ff35798fa6dcb62020c6
SHA1 c4a6abb07705d6fdecdcd126bc60b7dc6617f8f0
SHA512 5d1f66b5e1df4e019fa14564cf477e0cc105c2a9611b7807c7e2444782f6183ce97828f980b08856268634ed4f946af1b0d4f94d99780445864aeef7645fdab2
SSDEEP 393216:9m3jAlqrWUIyB1mdnKQO5dEhLN8DDifhAz90hXIPoO8I/n:qrdII1mhKfghLNfEOGPosf
MD5 SHA1 SHA512 SSDEEP

Password

123

OTPBOT.exe

SHA256 7c833f195a6be1c64c85cca8f227f0226726609bc564f9577ef81924aa99c1b4
MD5 d76d4061a38546dda1d9748588b75f18
SHA1 adbcd8ada656dddd3809bdd8061f59fbb53351bd
SHA512 f4cdfe95be590c55fd32fcaf711961ab67fcee8dcceeb44bf8cb4e6e2208b207073ba7a329a843ac1d63d5f5a2d8fae78dc2043afc4b2829757246c05eff7fb1
SSDEEP 393216:Ib7D+eNMC7Z61Kqm/1MpfnZ0ZjupISFOxcyUVBWABkgr0:U/mCNoZm9ML05ualxc0E
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

123

Minor OS version

Major OS version

Entry point

633728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

615KB

Virtual Size

614KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

57B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

16.1MB

Virtual Size

16.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

OTPBOT.rar

OTPBOT.exe

generic