General

  • Target

    nebula.zip

  • Size

    370.0MB

  • MD5

    4c48b025b04f40404ddfc53be7e44c4c

  • SHA1

    a96754316bf9bc31cee2d1d87d9140de432e4b52

  • SHA256

    014fee6b9af81f0cf4f6e7ff118b0cd631ef512f6f7ac5564b82c793621bb78d

  • SHA512

    0c565f766a9cc2899d6b2003371189a110865f69f4ac4ea2e55241913d1ec099d7a6c73b87304114dc99b19af39526236a56f304af18d17a964248b8cf2a2e38

  • SSDEEP

    6291456:Htq8rPCeDFbC0nMfL5kC9kExadEWbyWlvU4flS/HocrP2GDFbC0nMfL5kC9kExaU:TrC0QRkIWbyW7lQvHC0QRkIWbyWIViJ+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 26 IoCs

    Checks for missing Authenticode signature.

Files

  • nebula.zip
    .zip
  • nebula/CefSharp.BrowserSubprocess.Core.dll
    .dll windows:6 windows x64 arch:x64

    fd8d83265d1d098a7029c549d9d26673


    Headers

    Imports

    Exports

    Sections

  • nebula/CefSharp.BrowserSubprocess.Core.pdb
  • nebula/CefSharp.BrowserSubprocess.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • nebula/CefSharp.BrowserSubprocess.pdb
  • nebula/CefSharp.Core.Runtime.dll
    .dll windows:6 windows x64 arch:x64

    a0ee40bf96c6cc4f0b96ad521dd2ed59


    Headers

    Imports

    Exports

    Sections

  • nebula/CefSharp.Core.Runtime.pdb
  • nebula/CefSharp.Core.Runtime.xml
    .js .xml polyglot
  • nebula/CefSharp.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • nebula/chrome_100_percent.pak
  • nebula/chrome_200_percent.pak
  • nebula/chrome_elf.dll
    .dll windows:10 windows x64 arch:x64

    810210b3b11890bee1090535e576e13f


    Headers

    Imports

    Exports

    Sections

  • nebula/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nebula/dxcompiler.dll
    .dll windows:10 windows x64 arch:x64

    ab3093cf1cff53f421cecf4eeee429f4


    Headers

    Imports

    Exports

    Sections

  • nebula/dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nebula/executer.deps.json
  • nebula/executer.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • nebula/executer.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • nebula/executer.pdb
  • nebula/executer.runtimeconfig.json
  • nebula/icudtl.dat
  • nebula/libEGL.dll
    .dll windows:10 windows x64 arch:x64

    9a96e9625913c28565890e319d5bf446


    Headers

    Imports

    Exports

    Sections

  • nebula/libGLESv2.dll
    .dll windows:10 windows x64 arch:x64

    8493b5852f29b95099711891808f02c6


    Headers

    Imports

    Exports

    Sections

  • nebula/libcef.dll
    .dll windows:10 windows x64 arch:x64

    983a329c063b91ba6e14a0a66af41a47


    Headers

    Imports

    Exports

    Sections

  • nebula/locales/af.pak
  • nebula/locales/am.pak
  • nebula/locales/ar.pak
  • nebula/locales/bg.pak
  • nebula/locales/bn.pak
  • nebula/locales/ca.pak
  • nebula/locales/cs.pak
  • nebula/locales/da.pak
  • nebula/locales/de.pak
  • nebula/locales/el.pak
  • nebula/locales/en-GB.pak
  • nebula/locales/en-US.pak
  • nebula/locales/es-419.pak
  • nebula/locales/es.pak
  • nebula/locales/et.pak
  • nebula/locales/fa.pak
  • nebula/locales/fi.pak
  • nebula/locales/fil.pak
  • nebula/locales/fr.pak
  • nebula/locales/gu.pak
  • nebula/locales/he.pak
  • nebula/locales/hi.pak
  • nebula/locales/hr.pak
  • nebula/locales/hu.pak
  • nebula/locales/id.pak
  • nebula/locales/it.pak
  • nebula/locales/ja.pak
  • nebula/locales/kn.pak
  • nebula/locales/ko.pak
  • nebula/locales/lt.pak
  • nebula/locales/lv.pak
  • nebula/locales/ml.pak
  • nebula/locales/mr.pak
  • nebula/locales/ms.pak
  • nebula/locales/nb.pak
  • nebula/locales/nl.pak
  • nebula/locales/pl.pak
  • nebula/locales/pt-BR.pak
  • nebula/locales/pt-PT.pak
  • nebula/locales/ro.pak
  • nebula/locales/ru.pak
  • nebula/locales/sk.pak
  • nebula/locales/sl.pak
  • nebula/locales/sr.pak
  • nebula/locales/sv.pak
  • nebula/locales/sw.pak
  • nebula/locales/ta.pak
  • nebula/locales/te.pak
  • nebula/locales/th.pak
  • nebula/locales/tr.pak
  • nebula/locales/uk.pak
  • nebula/locales/ur.pak
  • nebula/locales/vi.pak
    .ps1
  • nebula/locales/zh-CN.pak
  • nebula/locales/zh-TW.pak
  • nebula/resources.pak
  • nebula/runtimes/win-x64/native/chrome_100_percent.pak
  • nebula/runtimes/win-x64/native/chrome_200_percent.pak
  • nebula/runtimes/win-x64/native/chrome_elf.dll
    .dll windows:10 windows x64 arch:x64

    810210b3b11890bee1090535e576e13f


    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x64/native/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x64/native/dxcompiler.dll
    .dll windows:10 windows x64 arch:x64

    ab3093cf1cff53f421cecf4eeee429f4


    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x64/native/dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x64/native/icudtl.dat
  • nebula/runtimes/win-x64/native/libEGL.dll
    .dll windows:10 windows x64 arch:x64

    9a96e9625913c28565890e319d5bf446


    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x64/native/libGLESv2.dll
    .dll windows:10 windows x64 arch:x64

    8493b5852f29b95099711891808f02c6


    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x64/native/libcef.dll
    .dll windows:10 windows x64 arch:x64

    983a329c063b91ba6e14a0a66af41a47


    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x64/native/resources.pak
  • nebula/runtimes/win-x64/native/snapshot_blob.bin
  • nebula/runtimes/win-x64/native/v8_context_snapshot.bin
  • nebula/runtimes/win-x64/native/vk_swiftshader.dll
    .dll windows:10 windows x64 arch:x64

    cff2e3bc77a72caa699e7cda3a0c38d8


    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x64/native/vk_swiftshader_icd.json
  • nebula/runtimes/win-x64/native/vulkan-1.dll
    .dll windows:10 windows x64 arch:x64

    1cca81ae4aa193b35ac4e7a2c9d50b0f


    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x86/native/chrome_100_percent.pak
  • nebula/runtimes/win-x86/native/chrome_200_percent.pak
  • nebula/runtimes/win-x86/native/chrome_elf.dll
    .dll windows:10 windows x86 arch:x86

    4cfb23140492af37bcc393a0d4633da4


    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x86/native/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    7f269ea2d96d8d376f2c7642ddadc7bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x86/native/icudtl.dat
  • nebula/runtimes/win-x86/native/libEGL.dll
    .dll windows:10 windows x86 arch:x86

    8f9a97bb419cdb8d7e18dd56a95cf8b0


    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x86/native/libGLESv2.dll
    .dll windows:10 windows x86 arch:x86

    3885736f3b64cada6a6b0e86a95ded4c


    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x86/native/libcef.dll
    .dll windows:10 windows x86 arch:x86

    091869d6d83c0495dc092acf2af9f82d


    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x86/native/resources.pak
  • nebula/runtimes/win-x86/native/snapshot_blob.bin
  • nebula/runtimes/win-x86/native/v8_context_snapshot.bin
  • nebula/runtimes/win-x86/native/vk_swiftshader.dll
    .dll windows:10 windows x86 arch:x86

    e24444131575b3d2e071792571476c36


    Headers

    Imports

    Exports

    Sections

  • nebula/runtimes/win-x86/native/vk_swiftshader_icd.json
  • nebula/runtimes/win-x86/native/vulkan-1.dll
    .dll windows:10 windows x86 arch:x86

    306d446ace3ed55e62abf80ed2edc956


    Headers

    Imports

    Exports

    Sections

  • nebula/snapshot_blob.bin
  • nebula/v8_context_snapshot.bin
  • nebula/vk_swiftshader.dll
    .dll windows:10 windows x64 arch:x64

    cff2e3bc77a72caa699e7cda3a0c38d8


    Headers

    Imports

    Exports

    Sections

  • nebula/vk_swiftshader_icd.json
  • nebula/vulkan-1.dll
    .dll windows:10 windows x64 arch:x64

    1cca81ae4aa193b35ac4e7a2c9d50b0f


    Headers

    Imports

    Exports

    Sections