General

  • Target

    mal.zip

  • Size

    79.0MB

  • MD5

    8f19e5fdd6bb459539cbc015708e38ef

  • SHA1

    632e0fe9f46e4ddd2e8c73119c5cb289120cdb0e

  • SHA256

    f223e9026b4d96297c557dbd87602e74f96cb426f2b4ecabc3665f3de8443884

  • SHA512

    ae7d7a32906eb8c8b69a864de0ee4a77adb054809ac7371cdc166ab2815f00b6aee83cd829d18f1269604a23168b7b100caa4ce514b6523fe11810777687734c

  • SSDEEP

    1572864:30y38qd7JNLfPsEfFKgOd1R9s0hgA616DnTyjuHvoa8KjslCMlu:Nn9N6RNixk3pHvoa8Isl1g

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 40 IoCs

    Checks for missing Authenticode signature.

Files

  • mal.zip
    .zip
  • onefile_6304_133665095847832968/PIL/_imaging.pyd
    .dll windows:6 windows x64 arch:x64

    5ac087e4cbcc1e06b9ed31e2246891ee


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/PIL/_imagingcms.pyd
    .dll windows:6 windows x64 arch:x64

    c29584f2e60cc456e6639a2b43ed17a3


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/PIL/_imagingmath.pyd
    .dll windows:6 windows x64 arch:x64

    d11cf983f40319a2400eac91b524bd0e


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/PIL/_webp.pyd
    .dll windows:6 windows x64 arch:x64

    d106e6b7baa94b106bdca0b4c32413e8


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_asyncio.pyd
    .dll windows:6 windows x64 arch:x64

    4e35d4f382a6e5820e4db9b220964fe1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_brotli.pyd
    .dll windows:6 windows x64 arch:x64

    8ce0bae6c58d3b74306bdd3d61e9c347


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_bz2.pyd
    .dll windows:6 windows x64 arch:x64

    a36962884764276bb35985709aa4e40d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_cffi_backend.pyd
    .dll windows:6 windows x64 arch:x64

    8f8d662a942cad4ff1001cad6ca84431


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_ctypes.pyd
    .dll windows:6 windows x64 arch:x64

    c7e678778370beefa2be60d7f0444c52


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_decimal.pyd
    .dll windows:6 windows x64 arch:x64

    45cfc0dbb456d5511c83e751dbe4c179


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_elementtree.pyd
    .dll windows:6 windows x64 arch:x64

    9d95ecaf88a0f327400618bb4ddc0387


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_hashlib.pyd
    .dll windows:6 windows x64 arch:x64

    a8173ef8679f8544a88e355945112c77


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_lzma.pyd
    .dll windows:6 windows x64 arch:x64

    b865edd9b0c291111893fc2b523f7264


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_multiprocessing.pyd
    .dll windows:6 windows x64 arch:x64

    9ff0f8f78fa8876d3d00f9ec2aa78b75


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_overlapped.pyd
    .dll windows:6 windows x64 arch:x64

    1f6b0816935b9dea5ee9898c98097635


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_queue.pyd
    .dll windows:6 windows x64 arch:x64

    efe3e840cb4904222351e9b7f17afea3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_socket.pyd
    .dll .js windows:6 windows x64 arch:x64 polyglot

    de62106114a70bb3c0dfb5c6513e0ba1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_ssl.pyd
    .dll windows:6 windows x64 arch:x64

    7ff099707b1756904a37967ff290adb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_uuid.pyd
    .dll windows:6 windows x64 arch:x64

    c2ef50d1f8f9a12aa6ad60689f8e919b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_win32sysloader.pyd
    .dll windows:6 windows x64 arch:x64

    6eb1b1485fca282960c3759b0ef6f1b5


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/_wmi.pyd
    .dll windows:6 windows x64 arch:x64

    a5c1c822c7f91c00d16d1dd7f10e20e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/aiohttp/_helpers.pyd
    .dll windows:6 windows x64 arch:x64

    1d189d7e5ff705b18c39c5325c252085


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/aiohttp/_http_parser.pyd
    .dll windows:6 windows x64 arch:x64

    9fddad0f05a419e4109ae3f72202e302


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/aiohttp/_http_writer.pyd
    .dll windows:6 windows x64 arch:x64

    442bd86c1151730492582aa3cc743e9e


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/aiohttp/_websocket.pyd
    .dll windows:6 windows x64 arch:x64

    2d209c7d7f97d487290f47aa510db11e


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/certifi/cacert.pem
  • onefile_6304_133665095847832968/cryptography/hazmat/bindings/_rust.pyd
    .dll windows:6 windows x64 arch:x64

    1aaf19e6e21696d67018db32daf0d41d


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/cv2/cv2.pyd
    .dll windows:6 windows x64 arch:x64

    cd9d008d89513ab6cb793674f9eddfef


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/cv2/opencv_videoio_ffmpeg4100_64.dll
    .dll windows:4 windows x64 arch:x64

    e4d00c955bbef72b9e6d22e33ed39ef2


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/drvinst.exe
    .exe windows:6 windows x64 arch:x64

    a8e22e6826cdfc009a12c60f26ac97ad


    Headers

    Imports

    Sections

  • onefile_6304_133665095847832968/frozenlist/_frozenlist.pyd
    .dll windows:6 windows x64 arch:x64

    dfa2faaa0cc5b7b922185711e191c3e9


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/libcrypto-3.dll
    .dll windows:6 windows x64 arch:x64

    40bce6a23883072a66c68006f08e105c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/libffi-8.dll
    .dll windows:6 windows x64 arch:x64

    3dc8b86d60f90a1851eee5f9dc191312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/libssl-3.dll
    .dll windows:6 windows x64 arch:x64

    dc44c25ab05f2ed83d242e885f9b4799


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/multidict/_multidict.pyd
    .dll windows:6 windows x64 arch:x64

    ab164bcfbcacde7d4dde43fe084e0c89


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy.libs/libscipy_openblas64_-fb1711452d4d8cee9f276fd1449ee5c7.dll
    .dll windows:4 windows x64 arch:x64

    0192801a74ab651a7e6801eb031117e5


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy.libs/msvcp140-8021418012832a07a8ca5105a33b1086.dll
    .dll windows:6 windows x64 arch:x64

    adf99b9ea3a1f76c33522f96772bc4dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/_core/_multiarray_tests.pyd
    .dll windows:6 windows x64 arch:x64

    c3acac0a6fed7320753c316d91471c6a


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/_core/_multiarray_umath.pyd
    .dll windows:6 windows x64 arch:x64

    288a5eb142745c358657fffa44439e52


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/fft/_pocketfft_umath.pyd
    .dll windows:6 windows x64 arch:x64

    1ee3d4113cd3bd490a3ed6230fe9d9c5


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/linalg/_umath_linalg.pyd
    .dll windows:6 windows x64 arch:x64

    8673d406a7f203735827c558d216b7f9


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/random/_bounded_integers.pyd
    .dll windows:6 windows x64 arch:x64

    9583d983d71787d4103c76717758945b


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/random/_common.pyd
    .dll windows:6 windows x64 arch:x64

    9b78db7d5e2e6f4f24872b8e02fc4de0


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/random/_generator.pyd
    .dll windows:6 windows x64 arch:x64

    6b4ff3348f68f7a0d601d86abe3f927e


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/random/_mt19937.pyd
    .dll windows:6 windows x64 arch:x64

    15b7652d24b410de5ac2a682dcefe650


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/random/_pcg64.pyd
    .dll windows:6 windows x64 arch:x64

    52e24edb61ccf70c9caa4b8d5caf1641


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/random/_philox.pyd
    .dll windows:6 windows x64 arch:x64

    596a1d57e1605d8f1861633c4ad7e04c


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/random/_sfc64.pyd
    .dll windows:6 windows x64 arch:x64

    54335326878abee2db4a67e26bbe6ff3


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/random/bit_generator.pyd
    .dll windows:6 windows x64 arch:x64

    f018757b4e7e9049e7f7033758bab647


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/numpy/random/mtrand.pyd
    .dll windows:6 windows x64 arch:x64

    2bf2863486efe68ea3909d12faf9a154


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/psutil/_psutil_windows.pyd
    .dll windows:6 windows x64 arch:x64

    7655a95700b7d9f6fc1f226e258e1235


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/pyexpat.pyd
    .dll windows:6 windows x64 arch:x64

    cf5b5f91e5aeac3c5953a0b69a300283


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/python3.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • onefile_6304_133665095847832968/python312.dll
    .dll windows:6 windows x64 arch:x64

    f8e2e55d20d3c537df33c9a83eab99cf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/pythoncom312.dll
    .dll windows:6 windows x64 arch:x64

    ec6b4ba563147d1ed4e69fffae634d98


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/pywintypes312.dll
    .dll windows:6 windows x64 arch:x64

    1932dc7308cebcb6a466b352c2b3e5cc


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/select.pyd
    .dll windows:6 windows x64 arch:x64

    e41677fc9cd5514cd954ce2ce19e425c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/unicodedata.pyd
    .dll windows:6 windows x64 arch:x64

    a3519e9a1b69560ea1c5fe43fd626ac5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    72707e942878aac770fcc118ce3ec1c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/win32api.pyd
    .dll windows:6 windows x64 arch:x64

    409a2c6c7728752ffdaf229681d7bcf1


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/win32com/shell/shell.pyd
    .dll windows:6 windows x64 arch:x64

    f1723f99c0441d30a40955ccb2adb249


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/win32event.pyd
    .dll windows:6 windows x64 arch:x64

    5d808a00d2f4daff0f077b45d7a7cc3d


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/win32process.pyd
    .dll windows:6 windows x64 arch:x64

    47af03ab18500cf79b6dc0f3ce0701df


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/win32security.pyd
    .dll windows:6 windows x64 arch:x64

    56ac549f40aa41136e04521d1625bd72


    Headers

    Imports

    Exports

    Sections

  • onefile_6304_133665095847832968/yarl/_quoting_c.pyd
    .dll windows:6 windows x64 arch:x64

    0b8e6d85c57a407746d9e4d19362ad97


    Headers

    Imports

    Exports

    Sections