Resubmissions

06/08/2024, 08:19

240806-j79k3sthpk 10

06/08/2024, 08:16

240806-j56reayajh 10

General

  • Target

    RoS_BotOB.zip

  • Size

    66.6MB

  • MD5

    2387ccfc95e298ce66c8f4299ece3d86

  • SHA1

    afca4ab35888c889aad8f3310dda1c28c4a0ea81

  • SHA256

    ccc17140498a012a743fb2376da1ce3ae0aa496fe817cc5bae409643bb62b74c

  • SHA512

    5f237bbe233ce6a2e7dca4bfaebeacb74946e0b913049e87afa1c9d8def1ff58c7cbda0dac584ab418fd8bdb1ff4585e40f85a87dc148dad5adb16ed7c6b8d29

  • SSDEEP

    1572864:P/0kVT7JAummCA6O+3RtHSf9yjdiytLul7/0P:fT72dmCDzdiytLw78P

Score
10/10

Malware Config

Extracted

Family

lumma

Signatures

  • Lumma family
  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • RoS_BotOB.zip
    .zip

    Password: 8866

  • RoS_BotOB/RoS Diablo3.exe
    .exe windows:6 windows x86 arch:x86

    Password: 8866

    a2eb6cc146c4e9dfe5bcaee15109632a


    Headers

    Imports

    Sections

  • RoS_BotOB/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    Password: 8866

    403d8cc0d31f841d5bbf6b82c1ea957d


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    Password: 8866

    62b94bd6c48f8e0f6d82aa2752720dbe


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    Password: 8866

    5dc4b26565969216fe39584905c80ce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    Password: 8866

    8f734ad2a2d1a7b5910aa87f16fd104e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    8307f0e2ecc6bdee56d484a6da9becc5


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/Qt5Positioning.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    c3ad7fa53f1cdce5fd347b75c91d4a67


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/Qt5PrintSupport.dll
    .dll windows:6 windows x64 arch:x64

    Password: 8866

    916ba1ac85472e1ce14facf380585b8f


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/Qt5Qml.dll
    .dll windows:6 windows x64 arch:x64

    abde8bb7b59607960cc46a82df0c6881


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/Qt5QmlModels.dll
    .dll windows:6 windows x64 arch:x64

    ae71555b75f63b6ecc0dd96b9c7a187e


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/Qt5QmlWorkerScript.dll
    .dll windows:6 windows x64 arch:x64

    a5467ce1566bbb41901390ff0103e3b7


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/Qt5Quick.dll
    .dll windows:6 windows x64 arch:x64

    c8dfad7efb62649eb406291eaab1aabf


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/Qt5QuickControls2.dll
    .dll windows:6 windows x64 arch:x64

    6d30490561f57b201cb1cf15131cab85


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    70d4f037a0ab67cbe75e5358a3f3386f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    b9416204924b28aa8c96be9645643488


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/cef_200_percent.pak
  • RoS_BotOB/manual/config/chrome_elf.dll
    .dll windows:5 windows x64 arch:x64

    a21402ea151644d20096e026ec8b9d63


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    4004e7f7eff525b82926d9696cb4db19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/dx12user.settings
  • RoS_BotOB/manual/config/dx12user.settings.bak
  • RoS_BotOB/manual/config/ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    6ed82d3226365ffafff2c57c1935d352


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/icudtl.dat
  • RoS_BotOB/manual/config/input.settings
  • RoS_BotOB/manual/config/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    b7d07fba9927b6b4247e86eea7632776


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/netcenter.dll
  • RoS_BotOB/manual/config/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86

    55466abe52f1bf0d8df45beaffd68bf3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/profile.settings
  • RoS_BotOB/manual/config/settings/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    5dc4b26565969216fe39584905c80ce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/settings/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    8f734ad2a2d1a7b5910aa87f16fd104e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/settings/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    1cd41c0abd9e652b8c20ad73c41f45e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/settings/Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    70d4f037a0ab67cbe75e5358a3f3386f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/settings/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    b9416204924b28aa8c96be9645643488


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/settings/cef_100_percent.pak
  • RoS_BotOB/manual/config/settings/cef_200_percent.pak
  • RoS_BotOB/manual/config/settings/chrome_elf.dll
    .dll windows:5 windows x64 arch:x64

    a21402ea151644d20096e026ec8b9d63


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/settings/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    4004e7f7eff525b82926d9696cb4db19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/settings/dx12user.settings
  • RoS_BotOB/manual/config/settings/dx12user.settings.bak
  • RoS_BotOB/manual/config/settings/ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    6ed82d3226365ffafff2c57c1935d352


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/settings/icudtl.dat
  • RoS_BotOB/manual/config/settings/input.settings
  • RoS_BotOB/manual/config/settings/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    b7d07fba9927b6b4247e86eea7632776


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/settings/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/settings/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/settings/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86

    55466abe52f1bf0d8df45beaffd68bf3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/settings/profile.settings
  • RoS_BotOB/manual/config/settings/ssleay32.dll
    .dll windows:6 windows x86 arch:x86

    073d57b7886016768db36f2bc192c07c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/manual/config/ssleay32.dll
    .dll windows:6 windows x86 arch:x86

    073d57b7886016768db36f2bc192c07c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    5dc4b26565969216fe39584905c80ce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    8f734ad2a2d1a7b5910aa87f16fd104e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    1cd41c0abd9e652b8c20ad73c41f45e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    70d4f037a0ab67cbe75e5358a3f3386f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    b9416204924b28aa8c96be9645643488


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/cef_100_percent.pak
  • RoS_BotOB/settings/cef_200_percent.pak
  • RoS_BotOB/settings/chrome_elf.dll
    .dll windows:5 windows x64 arch:x64

    a21402ea151644d20096e026ec8b9d63


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    4004e7f7eff525b82926d9696cb4db19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/dx12user.settings
  • RoS_BotOB/settings/dx12user.settings.bak
  • RoS_BotOB/settings/ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    6ed82d3226365ffafff2c57c1935d352


    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/icudtl.dat
  • RoS_BotOB/settings/input.settings
  • RoS_BotOB/settings/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    b7d07fba9927b6b4247e86eea7632776


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86

    55466abe52f1bf0d8df45beaffd68bf3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RoS_BotOB/settings/profile.settings
  • RoS_BotOB/settings/ssleay32.dll
    .dll windows:6 windows x86 arch:x86

    073d57b7886016768db36f2bc192c07c


    Code Sign

    Headers

    Imports

    Exports

    Sections