General

  • Target

    spoofer_vip_78yi.rar

  • Size

    151KB

  • MD5

    42e85f3b4fc701c07d5eecd485a42c8f

  • SHA1

    513df1d273a758626b0cadf2ccf6c890cf0edd30

  • SHA256

    d8fa1ac687cd57b03ccd27075cc014599056eaa2168d9c34fd1d33081f98e44f

  • SHA512

    ecb963b19ac766100f52aa9ae405b92e8ca5d7c8ab7b16f73980b329b06c8e9d6bd5ef4c8ca54e9226eb2282d75f2564983b07777e3414ba77d06154af476b5f

  • SSDEEP

    3072:xFkR0vl0WrrYgpqH9lAG7KI6XUk0StOcHDDT2PJR79mH8bXmnBZTndHy0Px6G:xi6vKWrM59e6KlXacH3TWJu8bXmXTd9D

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • spoofer_vip_78yi.rar
    .rar
  • SPOOFER VIP/adaletsarayi.sys
    .sys windows:10 windows x64 arch:x64

    fe698619e8737fed9feabf638933fac1


    Code Sign

    Headers

    Imports

    Sections

  • SPOOFER VIP/magic.exe
    .exe windows:6 windows x64 arch:x64

    ca4967633bf974ff30c78dc5655fe3c3


    Headers

    Imports

    Sections

  • SPOOFER VIP/magic2.exe
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • SPOOFER VIP/spoof.exe
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections