Resubmissions

06/08/2024, 21:49

240806-1pre8a1hjl 3

General

  • Target

    Wind.rar

  • Size

    957KB

  • MD5

    63f0a76169a70fae9cf620740103adf0

  • SHA1

    d842f570ea9fe3017909f436fee54d351f1cb8af

  • SHA256

    a5a568258440d71b462c65ab8c883a4c58d8068b49578612550a7adb4cf54a60

  • SHA512

    c0126bbb065242207081bead5b5a9219fa3dcf59b986b6b413d303a958bbe43f32b058454d7a4769383ffc19c9620ae3b2781eae35aa82446db5699966d186c2

  • SSDEEP

    12288:gvv9O2XtL/CwypNCeYYDWkiVWT1tCMopK9Pwm3jCzk7q/FXp3uMCcuNjliJDWQU7:6v9OwtryDC/MsFpojCzeq/FZRuQ+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Wind.rar
    .rar
  • Wind/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    86466c337c0f4054f390a6d67e4d3ebf


    Headers

    Imports

    Exports

    Sections

  • Wind/windinject.exe
    .exe windows:6 windows x64 arch:x64

    f4a328fbb9c60c7e1bd2a62c5a0780fe


    Headers

    Imports

    Sections

  • Wind/workspace/UQMP9VS6AJxBjr7.lua
  • Wind/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Wind/zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections

  • Wind/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections