General

  • Target

    use_2024_tо_оpen.zip

  • Size

    15.6MB

  • MD5

    ad91f6b959f0e56fb9db00ce3396faf9

  • SHA1

    d5f72c46a6580c620fe985b1c388ee017dd23d39

  • SHA256

    b7248da4255c8ead4f081f9e9d231ca3a9d2d865b8fc311bbeb8734bb2af79ef

  • SHA512

    72c21ddead5db2b88e0f1e94b30d135cfc944c9085addf8c29352e8d543dcae1b5fd367b11d977158066c72350332f723852ff60563868be3e049557133c4ecf

  • SSDEEP

    393216:xQYqfJzWjescapmSc5O6TLKYGj5BrFQND/iA0uL5Mrm:xloVWjeapcO6fKxjf+9iXrm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • use_2024_tо_оpen.zip
    .zip
  • use_2024_tо_оpen/ICQLiteShell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    36da04e9d80185202c5dff27d69487ef


    Headers

    Imports

    Exports

    Sections

  • use_2024_tо_оpen/ICQRT.dll
    .dll windows:4 windows x86 arch:x86

    eea1a54f9a41b7445dc95356daf71d0a


    Headers

    Imports

    Exports

    Sections

  • use_2024_tо_оpen/Language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • use_2024_tо_оpen/Language/an.txt
  • use_2024_tо_оpen/Language/ar.txt
  • use_2024_tо_оpen/Language/az.txt
  • use_2024_tо_оpen/Language/ba.txt
  • use_2024_tо_оpen/Language/be.txt
  • use_2024_tо_оpen/Language/bg.txt
  • use_2024_tо_оpen/Language/bn.txt
  • use_2024_tо_оpen/Language/ca.txt
  • use_2024_tо_оpen/Language/co.txt
  • use_2024_tо_оpen/Language/cs.txt
  • use_2024_tо_оpen/Language/da.txt
  • use_2024_tо_оpen/Language/de.txt
  • use_2024_tо_оpen/Language/el.txt
  • use_2024_tо_оpen/Language/eng.txt
  • use_2024_tо_оpen/Language/es.txt
  • use_2024_tо_оpen/Language/et.txt
  • use_2024_tо_оpen/Language/eu.txt
  • use_2024_tо_оpen/Language/ext.txt
  • use_2024_tо_оpen/Language/fa.txt
  • use_2024_tо_оpen/Language/fi.txt
  • use_2024_tо_оpen/Language/fr.txt
  • use_2024_tо_оpen/Language/fur.txt
  • use_2024_tо_оpen/Language/fy.txt
  • use_2024_tо_оpen/Language/ga.txt
  • use_2024_tо_оpen/Language/gl.txt
  • use_2024_tо_оpen/Language/gu.txt
  • use_2024_tо_оpen/Language/he.pak
  • use_2024_tо_оpen/Language/he.txt
  • use_2024_tо_оpen/Language/hi.pak
  • use_2024_tо_оpen/Language/hi.txt
  • use_2024_tо_оpen/Language/hr.pak
  • use_2024_tо_оpen/Language/hr.txt
  • use_2024_tо_оpen/Language/hu.pak
  • use_2024_tо_оpen/Language/hu.txt
  • use_2024_tо_оpen/Language/hy.txt
  • use_2024_tо_оpen/Language/id.txt
  • use_2024_tо_оpen/Language/is.txt
  • use_2024_tо_оpen/Language/it.txt
  • use_2024_tо_оpen/Language/ja.txt
  • use_2024_tо_оpen/Language/ka.txt
  • use_2024_tо_оpen/Language/kaa.txt
  • use_2024_tо_оpen/Language/kab.txt
  • use_2024_tо_оpen/Language/kk.txt
  • use_2024_tо_оpen/Language/ko.txt
  • use_2024_tо_оpen/Language/ku-ckb.txt
  • use_2024_tо_оpen/Language/ky.txt
  • use_2024_tо_оpen/Language/lij.txt
  • use_2024_tо_оpen/Language/lt.txt
  • use_2024_tо_оpen/Language/mk.txt
  • use_2024_tо_оpen/Language/mn.txt
  • use_2024_tо_оpen/Language/mng.txt
  • use_2024_tо_оpen/Language/mng2.txt
  • use_2024_tо_оpen/Language/mr.txt
  • use_2024_tо_оpen/Language/ne.txt
  • use_2024_tо_оpen/Language/nl.txt
  • use_2024_tо_оpen/Language/pa-in.txt
  • use_2024_tо_оpen/Language/pl.txt
  • use_2024_tо_оpen/Language/ps.txt
  • use_2024_tо_оpen/Language/pt-br.txt
  • use_2024_tо_оpen/Language/pt.txt
  • use_2024_tо_оpen/Language/ro.txt
  • use_2024_tо_оpen/Language/ru.txt
  • use_2024_tо_оpen/Language/sa.txt
  • use_2024_tо_оpen/Language/si.txt
  • use_2024_tо_оpen/Language/sk.txt
  • use_2024_tо_оpen/Language/sl.txt
  • use_2024_tо_оpen/Language/sr-spc.txt
  • use_2024_tо_оpen/Language/sr-spl.txt
  • use_2024_tо_оpen/Language/sv.txt
  • use_2024_tо_оpen/Language/sw.txt
  • use_2024_tо_оpen/Language/ta.txt
  • use_2024_tо_оpen/Language/tg.txt
  • use_2024_tо_оpen/Language/th.txt
  • use_2024_tо_оpen/Language/tk.txt
  • use_2024_tо_оpen/Language/tr.txt
  • use_2024_tо_оpen/Language/tt.txt
  • use_2024_tо_оpen/Language/ug.txt
  • use_2024_tо_оpen/Language/uk.txt
  • use_2024_tо_оpen/Language/uz-cyrl.txt
  • use_2024_tо_оpen/Language/uz.txt
  • use_2024_tо_оpen/Language/va.txt
  • use_2024_tо_оpen/Language/vi.txt
  • use_2024_tо_оpen/Language/yo.txt
  • use_2024_tо_оpen/Language/zh-cn.txt
  • use_2024_tо_оpen/Language/zh-tw.txt
  • use_2024_tо_оpen/LiteRes.dll
    .dll windows:4 windows x86 arch:x86

    ce6ef31899b31809ae0c71c094c6f083


    Headers

    Imports

    Sections

  • use_2024_tо_оpen/LiteSkinUtils.dll
    .dll windows:4 windows x86 arch:x86

    a8d043bdfc629c21151b760b23d3bcd9


    Headers

    Imports

    Exports

    Sections

  • use_2024_tо_оpen/Resource/CMap/Identity-H
  • use_2024_tо_оpen/Resource/CMap/Identity-V
  • use_2024_tо_оpen/Resource/CMap/UCS2-GBK-EUC
  • use_2024_tо_оpen/Resource/CMap/UniKS-UTF16-H
  • use_2024_tо_оpen/Resource/CMap/UniKS-UTF16-V
  • use_2024_tо_оpen/Resource/Font/AdobePIStd.otf
  • use_2024_tо_оpen/Resource/Font/CourierStd-Bold.otf
  • use_2024_tо_оpen/Resource/Font/CourierStd-BoldOblique.otf
  • use_2024_tо_оpen/Resource/Font/CourierStd-Oblique.otf
  • use_2024_tо_оpen/Resource/Font/CourierStd.otf
  • use_2024_tо_оpen/Resource/Font/MinionPro-Bold.otf
  • use_2024_tо_оpen/Resource/Font/MinionPro-BoldIt.otf
  • use_2024_tо_оpen/Resource/Font/MinionPro-It.otf
  • use_2024_tо_оpen/Resource/Font/MinionPro-Regular.otf
  • use_2024_tо_оpen/Resource/Font/MyriadPro-Bold.otf
  • use_2024_tо_оpen/Resource/Font/MyriadPro-BoldIt.otf
  • use_2024_tо_оpen/Resource/Font/MyriadPro-It.otf
  • use_2024_tо_оpen/Resource/Font/MyriadPro-Regular.otf
  • use_2024_tо_оpen/Resource/Font/Pfm/SY______.PFM
  • use_2024_tо_оpen/Resource/Font/Pfm/zx______.pfm
  • use_2024_tо_оpen/Resource/Font/Pfm/zy______.pfm
  • use_2024_tо_оpen/Resource/Font/SY______.PFB
  • use_2024_tо_оpen/Resource/Font/ZX______.PFB
  • use_2024_tо_оpen/Resource/Font/ZY______.PFB
  • use_2024_tо_оpen/Resource/Locals/am.pak
  • use_2024_tо_оpen/Resource/Locals/ar.pak
  • use_2024_tо_оpen/Resource/Locals/fi.pak
  • use_2024_tо_оpen/Resource/Locals/fil.pak
  • use_2024_tо_оpen/Resource/Locals/fr.pak
  • use_2024_tо_оpen/Resource/Locals/gu.pak
  • use_2024_tо_оpen/Resource/Locals/he.pak
  • use_2024_tо_оpen/Resource/Locals/hi.pak
  • use_2024_tо_оpen/Resource/Locals/hr.pak
  • use_2024_tо_оpen/Resource/Locals/hu.pak
  • use_2024_tо_оpen/Resource/Locals/id.pak
  • use_2024_tо_оpen/Resource/Locals/lt.pak
  • use_2024_tо_оpen/Resource/Locals/lv.pak
  • use_2024_tо_оpen/Resource/Locals/x64/AdonisUI.ClassicTheme.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • use_2024_tо_оpen/Resource/Locals/x64/AdonisUI.ClassicTheme.xml
    .xml
  • use_2024_tо_оpen/Resource/Locals/x64/AdonisUI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • use_2024_tо_оpen/Resource/Locals/x64/AdonisUI.xml
    .xml
  • use_2024_tо_оpen/Resource/Locals/x64/SQLite.Interop.dll
    .dll windows:6 windows x64 arch:x64

    a42f73521c784fa06f1d886fcbcefcba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • use_2024_tо_оpen/Resource/Locals/x86/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • use_2024_tо_оpen/Resource/Locals/x86/BouncyCastle.Crypto.xml
    .xml
  • use_2024_tо_оpen/Resource/Locals/x86/SQLite.Interop.dll
    .dll windows:6 windows x86 arch:x86

    39ace63b362beb47a2a7a8202a5c4f2d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • use_2024_tо_оpen/Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/ICU/icudt26l.dat
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
  • use_2024_tо_оpen/Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
  • use_2024_tо_оpen/Resource/opengl64.dll
  • use_2024_tо_оpen/Resource/resources.pak
  • use_2024_tо_оpen/Sеtup.exe
    .exe windows:4 windows x86 arch:x86

    196992c146062db84cbd73903ca4b0ad


    Headers

    Imports

    Exports

    Sections

  • use_2024_tо_оpen/opengl64