General

  • Target

    checker.rar

  • Size

    97.8MB

  • MD5

    9ff272c98d1014aaf6109573a75697dc

  • SHA1

    0f1445edf68a30634a9472df4b1df877ce981621

  • SHA256

    01a17733eb7f42ed4c5b51a9f611d304c6f0846d74dbba021209c66dc66d3e8a

  • SHA512

    8ecc9d954323a9bba3e85d686148a676892e82d8ba950d30251a9ac85472983161ec764d458d893020c3f8e80c4b18cef32f15b5fdf0cd964ce15c9cb191f261

  • SSDEEP

    1572864:TmZvRYHO+GMTZSRXyZQf7TIbYD2rJhv8vwjq7r6/g34uAZgw6Lk7ckCYzFwpAOI1:MveOST4dJOYs4cqX0gbAqdYwkDFUAO2

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • checker.rar
    .rar
  • #!SetUp_2244_Pas$W0rd$$!!.zip
    .zip
  • #!!SetUp_2244_PassW0rd$$/#!!SetUp_2244_PassW0rd$$.rar
    .rar
  • #!!SetUp_2244_PassW0rd$$/Key.png
    .png
  • #!!SetUp_2244_PassW0rd$$/PassCode.txt
  • ALL IN ONE CHECKER(KAM3El).zip
    .zip
  • ALL IN ONE CHECKER(KAM3El)/All-In-One Checker_v24721.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ALL IN ONE CHECKER(KAM3El)/CriticalError.txt
  • ALL IN ONE CHECKER(KAM3El)/settings.xml
    .xml
  • Combo 100k.txt
  • Socks5_Proxys__ULTRAVALIDCLOUD.txt
  • Thunderbird Setup 128.1.0esr.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • gatherproxycracked-master.zip
    .zip
  • gatherproxycracked-master/Gather Proxy 9.0/Data/agents.txt
  • gatherproxycracked-master/Gather Proxy 9.0/Data/autosp.ini
  • gatherproxycracked-master/Gather Proxy 9.0/Data/configs.gp
  • gatherproxycracked-master/Gather Proxy 9.0/Data/country.txt
  • gatherproxycracked-master/Gather Proxy 9.0/Data/geo.mmdb
  • gatherproxycracked-master/Gather Proxy 9.0/Data/planetlab.txt
  • gatherproxycracked-master/Gather Proxy 9.0/Data/ref.ref
  • gatherproxycracked-master/Gather Proxy 9.0/Data/referrals.txt
  • gatherproxycracked-master/Gather Proxy 9.0/FacebookAPIClass.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • gatherproxycracked-master/Gather Proxy 9.0/GC.dll
    .dll windows:5 windows x86 arch:x86

    419b91bde37fdcf454d36e1724e0139e


    Headers

    Imports

    Exports

    Sections

  • gatherproxycracked-master/Gather Proxy 9.0/Gather Proxy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • gatherproxycracked-master/Gather Proxy 9.0/Gather Proxy.exe.config
    .xml
  • gatherproxycracked-master/Gather Proxy 9.0/HtmlAgilityPack.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • gatherproxycracked-master/Gather Proxy 9.0/MaxMind.Db.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • gatherproxycracked-master/Gather Proxy 9.0/MaxMind.GeoIP2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • gatherproxycracked-master/Gather Proxy 9.0/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • gatherproxycracked-master/Gather Proxy 9.0/Noesis.Javascript.dll
    .dll windows:5 windows x86 arch:x86

    42f95c516ec1f40775dc9eecd4cfbcea


    Headers

    Imports

    Sections

  • gatherproxycracked-master/Gather Proxy 9.0/RestSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • gatherproxycracked-master/Gather Proxy 9.0/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gatherproxycracked-master/Gather Proxy 9.0/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gatherproxycracked-master/Gather Proxy 9.0/symbols.map
  • gatherproxycracked-master/README
  • mail access good for all.txt