General

  • Target

    G K M 6 5.rar

  • Size

    10.7MB

  • MD5

    c6b1c68e51990b072405977b9cef25a3

  • SHA1

    f27e387e2b76778aeb1ea1b25352c88d8c863ed3

  • SHA256

    cd68c0c75979d2bfcba7cef9f39ce303df3187541122e76369956900760473c2

  • SHA512

    2d97f0eabfb31637b917081b655118d0da50b56bb7f8a73c6e9ceee7bf61ecb3438c3697b754fe66a8733ecea3bb93fcc01a4cefed95ae59c7ae8cb8fea2ecac

  • SSDEEP

    196608:ieYklRR3PbshtIM7d+4jZ0UucS8d9uJj4WpHSt9M882dg9ux0KMZ5gttMWD:iezd3T6IA0+fS8d9Mj9HSty882Qoq5g7

Score
10/10

Malware Config

Signatures

  • Detects Strela Stealer payload 1 IoCs
  • Strela family

Files

  • G K M 6 5.rar
    .rar

    Password: 2024

  • G K M 6 5/Client.config
    .exe windows:6 windows x86 arch:x86

    Password: 2024

    59bafed0fa1382619aa4b845f3f73552


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • G K M 6 5/GTA 5 Mod Menu.exe
    .exe windows:5 windows x86 arch:x86

    Password: 2024

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Coated
  • $TEMP/Extensive
  • $TEMP/Franklin
  • $TEMP/Gmt
  • AdelaideMumbai/Dildos
  • AdelaideMumbai/Earrings
  • AdelaideMumbai/Form
  • AdelaideMumbai/Pads
  • AlikeIraqi/Compatibility
  • AlikeIraqi/Establish
  • AlikeIraqi/Negotiations
  • AlikeIraqi/Partition
  • AlikeIraqi/Racial
  • AsCamera/Sharing
  • DownArising/Appliance
  • DownArising/Freebsd
  • DownArising/Guard
  • DownArising/Min
  • DownArising/Perception
  • DownArising/Phantom
  • DownArising/Realized
  • DownArising/Serving
  • DownArising/Theoretical
  • ImLogin/Civil
  • ImLogin/Destroy
  • ImLogin/Fully
  • ImLogin/Metres
  • ImLogin/Mia
  • ImLogin/Surrounded
  • ImLogin/Varied
  • ImLogin/Wi
  • LimitingWorkflow/Buys
  • LimitingWorkflow/Cnn
  • LimitingWorkflow/Invoice
  • LimitingWorkflow/Ion
  • LimitingWorkflow/Keeping
  • G K M 6 5/ai.cfg
  • G K M 6 5/cacert.pem
  • G K M 6 5/config.vdf