General

  • Target

    Release 2.1.rar

  • Size

    39.6MB

  • MD5

    4d20de8f3d9ce302f08b9cd08a684d5b

  • SHA1

    f625843d8afa6a752e98cc1d1298454cb370abe6

  • SHA256

    c269fad1beef8e4a551060dfc5c5f3133947b65685478f64d27b140edfc77d59

  • SHA512

    1e99a1d631275472900b8a211897766f650b6ad1869c6ebc1be1639d80053ad73a983b49c189ba89d97ef820c48638af014aa20a57fd7af3c44796f407f0fc2c

  • SSDEEP

    786432:QSFydNnWpLsIzRy/4SBYT0R3puzv+rPOtIEJUMwurPwj77Hi9Q45P:jO8FzRkZAeuzvYPOtJU072H45P

Malware Config

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 52 IoCs

    Checks for missing Authenticode signature.

Files

  • Release 2.1.rar
    .rar

    Password: 123

  • Release 2.1/ConfigBulid.json
  • Release 2.1/GMap.NET.Core.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/GMap.NET.WindowsForms.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/IconExtractor.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Ionic.Zip.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Maps.json
  • Release 2.1/MetroFramework.Design.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/MetroFramework.Fonts.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/MetroFramework.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/NAudio.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Release 2.1/Plugins/AutoRun.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/AutoTask.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Chat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Clipboard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/DDos.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/FileManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/FreendConnect.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Fun.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Images.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Keylogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Map.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Message.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/MicroPhone.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/MinerXmr.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Netstat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Regedit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/RemoteCamera.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/RemoteDesktop.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/ReverseProxy.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Scheduler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/SendFile.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Service.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Shell.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/SpeakBot.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Stealer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/System.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/TaskMgr.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/Uac.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/WormJoiner.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Plugins/WormSMB.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/Server.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Release 2.1/Server.exe.config
    .xml
  • Release 2.1/Stub/Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Release 2.1/Stub/UserMode.obf.dll
    .dll windows:6 windows x64 arch:x64

    6dbf95d81ab0cb2039f47259ddec333f


    Headers

    Imports

    Sections

  • Release 2.1/Stub/WinRing0x64.sys
    .sys windows:6 windows x64 arch:x64

    d41fa95d4642dc981f10de36f4dc8cd7


    Code Sign

    Headers

    Imports

    Sections

  • Release 2.1/Stub/ddb64.dll
    .dll windows:6 windows x64 arch:x64

    2b41a6eaabd449bd2521813e69f0a7c6


    Headers

    Imports

    Exports

    Sections

  • Release 2.1/Stub/ethminer.exe
    .exe windows:6 windows x64 arch:x64

    601d901af8200f541117a59e7736bfef


    Headers

    Imports

    Exports

    Sections

  • Release 2.1/Stub/fds.dll
    .dll windows:6 windows x64 arch:x64

    6dbf95d81ab0cb2039f47259ddec333f


    Headers

    Imports

    Sections

  • Release 2.1/Stub/nvrtc-builtins64_112.dll
    .dll windows:6 windows x64 arch:x64

    8f855f48184bff75de5ed8f701a5f778


    Headers

    Imports

    Exports

    Sections

  • Release 2.1/Stub/nvrtc64_112_0.dll
    .dll windows:6 windows x64 arch:x64

    4ca0827c1b67fe072d17a90113be5a0b


    Headers

    Imports

    Exports

    Sections

  • Release 2.1/Stub/sigthief.exe
    .exe windows:5 windows x64 arch:x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • Release 2.1/Stub/xmrminer.exe
    .exe windows:6 windows x64 arch:x64

    14ec8f3f7eee2e31d6dc574514386b4d


    Headers

    Imports

    Sections

  • Release 2.1/System.Buffers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Release 2.1/System.Collections.Immutable.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Release 2.1/System.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Release 2.1/System.Numerics.Vectors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Release 2.1/System.Runtime.CompilerServices.Unsafe.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Release 2.1/Themes.json
  • Release 2.1/Themes/белая/Themes.json
  • Release 2.1/Themes/бело - голубая/Themes.json
  • Release 2.1/Themes/дефолт/Themes.json
  • Release 2.1/Themes/как сделать свою сука/Themes.json
  • Release 2.1/Themes/как сделать свою сука/ИНСТРУКЦИЯ БЛЯТЬ.txt
  • Release 2.1/Themes/с серой полоской/Themes.json
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/5267135767674637292.ogg
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/5269439945070730327.jpg
    .jpg
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/5273960449689377746.jpg
    .jpg
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/5273960449689378245.jpg
    .jpg
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/5844871988282242496.jpg
    .jpg
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/image (10).png
    .png
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/image (12).png
    .png
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/image (16).png
    .png
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/photo_2023-11-29_23-03-59.jpg
    .jpg
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/video5253734030897074542.mp4
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/video5262518098010853845.mp4
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/w5.jpg
    .jpg
  • Release 2.1/Users/Хуй те, а не логи, папку чекни олух ебанный/тайно дёргал.mp4
  • Release 2.1/Vestris.ResourceLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/cGeoIp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release 2.1/protobuf-net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections