General

  • Target

    yjrr1b.rar

  • Size

    1.8MB

  • MD5

    9452a27a58ff2e8d3370cd8b08ef928e

  • SHA1

    c6aefca99b0ee883ce83ce3aa591e6b938f84cbf

  • SHA256

    17e11d18b340e970ea2e332046eb7ee4469ad1dd463a86743900f651d4be75b0

  • SHA512

    2343100962412892d559523418902ef9a80647324e7587da721dc63178ba81157bdaad02716ac26c66459a9130f68a4d401894d881070c100219919432f2f1fc

  • SSDEEP

    49152:P3El7Lk9OtLMO1nkcn4ToZXmYwy9D+UXl385hOAq9Ei:PO7L6OSO1H4edwy9/Xl385hON/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • yjrr1b.rar
    .rar

    Password: infected

  • HwidSpoofer.comv22.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • NEW.sys
    .sys windows:10 windows x64 arch:x64

    f94d546ff9f6c68715317e36e751e07c


    Code Sign

    Headers

    Imports

    Sections

  • mapper.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    f02bee0fac461a90ea2c05877e833237


    Headers

    Imports

    Sections