General

  • Target

    nebula.zip

  • Size

    371.3MB

  • MD5

    321d087320c020808048e1461eb10a8d

  • SHA1

    c80a4bf682545f8494c174ed712aaf06e17e9b14

  • SHA256

    a42da94642a8bb7992aa4c38a53de2d5795bb0589a375f5e8fc37da915dc1920

  • SHA512

    56f98eac7772cd0163dae0139fe882ec89b3f3d505eee6203c9947fffd1087c616f012850e6a9dcb6dec0b319cd035cd97e30cd60c69d3695af6a17755c2b3f5

  • SSDEEP

    6291456:S1CcrPK6DFbC0nMfL5kC9kExadEWbyWlvUrvdODHBkrPyaDFbC0nMfL5kC9kExaG:O7C0QRkIWbyWmd0S7C0QRkIWbyWIJiJg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

Files

  • nebula.zip
    .zip
  • net8.0-windows/CefSharp.BrowserSubprocess.Core.dll
    .dll windows:6 windows x64 arch:x64

    fd8d83265d1d098a7029c549d9d26673


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/CefSharp.BrowserSubprocess.Core.pdb
  • net8.0-windows/CefSharp.BrowserSubprocess.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • net8.0-windows/CefSharp.BrowserSubprocess.pdb
  • net8.0-windows/CefSharp.Core.Runtime.dll
    .dll windows:6 windows x64 arch:x64

    a0ee40bf96c6cc4f0b96ad521dd2ed59


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/CefSharp.Core.Runtime.pdb
  • net8.0-windows/CefSharp.Core.Runtime.xml
    .js .xml polyglot
  • net8.0-windows/CefSharp.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • net8.0-windows/Inject.exe
    .exe windows:6 windows x64 arch:x64

    fb4027ce68d813f51e65d80c601924ae


    Headers

    Imports

    Sections

  • net8.0-windows/chrome_100_percent.pak
  • net8.0-windows/chrome_200_percent.pak
  • net8.0-windows/chrome_elf.dll
    .dll windows:10 windows x64 arch:x64

    810210b3b11890bee1090535e576e13f


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/dxcompiler.dll
    .dll windows:10 windows x64 arch:x64

    ab3093cf1cff53f421cecf4eeee429f4


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/executer.deps.json
  • net8.0-windows/executer.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • net8.0-windows/executer.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • net8.0-windows/executer.pdb
  • net8.0-windows/executer.runtimeconfig.json
  • net8.0-windows/icudtl.dat
  • net8.0-windows/libEGL.dll
    .dll windows:10 windows x64 arch:x64

    9a96e9625913c28565890e319d5bf446


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/libGLESv2.dll
    .dll windows:10 windows x64 arch:x64

    8493b5852f29b95099711891808f02c6


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/libcef.dll
    .dll windows:10 windows x64 arch:x64

    983a329c063b91ba6e14a0a66af41a47


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/locales/af.pak
  • net8.0-windows/locales/am.pak
  • net8.0-windows/locales/ar.pak
  • net8.0-windows/locales/bg.pak
  • net8.0-windows/locales/bn.pak
  • net8.0-windows/locales/ca.pak
  • net8.0-windows/locales/cs.pak
  • net8.0-windows/locales/da.pak
  • net8.0-windows/locales/de.pak
  • net8.0-windows/locales/el.pak
  • net8.0-windows/locales/en-GB.pak
  • net8.0-windows/locales/en-US.pak
  • net8.0-windows/locales/es-419.pak
  • net8.0-windows/locales/es.pak
  • net8.0-windows/locales/et.pak
  • net8.0-windows/locales/fa.pak
  • net8.0-windows/locales/fi.pak
  • net8.0-windows/locales/fil.pak
  • net8.0-windows/locales/fr.pak
  • net8.0-windows/locales/gu.pak
  • net8.0-windows/locales/he.pak
  • net8.0-windows/locales/hi.pak
  • net8.0-windows/locales/hr.pak
  • net8.0-windows/locales/hu.pak
  • net8.0-windows/locales/id.pak
  • net8.0-windows/locales/it.pak
  • net8.0-windows/locales/ja.pak
  • net8.0-windows/locales/kn.pak
  • net8.0-windows/locales/ko.pak
  • net8.0-windows/locales/lt.pak
  • net8.0-windows/locales/lv.pak
  • net8.0-windows/locales/ml.pak
  • net8.0-windows/locales/mr.pak
  • net8.0-windows/locales/ms.pak
  • net8.0-windows/locales/nb.pak
  • net8.0-windows/locales/nl.pak
  • net8.0-windows/locales/pl.pak
  • net8.0-windows/locales/pt-BR.pak
  • net8.0-windows/locales/pt-PT.pak
  • net8.0-windows/locales/ro.pak
  • net8.0-windows/locales/ru.pak
  • net8.0-windows/locales/sk.pak
  • net8.0-windows/locales/sl.pak
  • net8.0-windows/locales/sr.pak
  • net8.0-windows/locales/sv.pak
  • net8.0-windows/locales/sw.pak
  • net8.0-windows/locales/ta.pak
  • net8.0-windows/locales/te.pak
  • net8.0-windows/locales/th.pak
  • net8.0-windows/locales/tr.pak
  • net8.0-windows/locales/uk.pak
  • net8.0-windows/locales/ur.pak
  • net8.0-windows/locales/vi.pak
    .ps1
  • net8.0-windows/locales/zh-CN.pak
  • net8.0-windows/locales/zh-TW.pak
  • net8.0-windows/resources.pak
  • net8.0-windows/runtimes/win-x64/native/chrome_100_percent.pak
  • net8.0-windows/runtimes/win-x64/native/chrome_200_percent.pak
  • net8.0-windows/runtimes/win-x64/native/chrome_elf.dll
    .dll windows:10 windows x64 arch:x64

    810210b3b11890bee1090535e576e13f


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x64/native/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x64/native/dxcompiler.dll
    .dll windows:10 windows x64 arch:x64

    ab3093cf1cff53f421cecf4eeee429f4


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x64/native/dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x64/native/icudtl.dat
  • net8.0-windows/runtimes/win-x64/native/libEGL.dll
    .dll windows:10 windows x64 arch:x64

    9a96e9625913c28565890e319d5bf446


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x64/native/libGLESv2.dll
    .dll windows:10 windows x64 arch:x64

    8493b5852f29b95099711891808f02c6


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x64/native/libcef.dll
    .dll windows:10 windows x64 arch:x64

    983a329c063b91ba6e14a0a66af41a47


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x64/native/resources.pak
  • net8.0-windows/runtimes/win-x64/native/snapshot_blob.bin
  • net8.0-windows/runtimes/win-x64/native/v8_context_snapshot.bin
  • net8.0-windows/runtimes/win-x64/native/vk_swiftshader.dll
    .dll windows:10 windows x64 arch:x64

    cff2e3bc77a72caa699e7cda3a0c38d8


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x64/native/vk_swiftshader_icd.json
  • net8.0-windows/runtimes/win-x64/native/vulkan-1.dll
    .dll windows:10 windows x64 arch:x64

    1cca81ae4aa193b35ac4e7a2c9d50b0f


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x86/native/chrome_100_percent.pak
  • net8.0-windows/runtimes/win-x86/native/chrome_200_percent.pak
  • net8.0-windows/runtimes/win-x86/native/chrome_elf.dll
    .dll windows:10 windows x86 arch:x86

    4cfb23140492af37bcc393a0d4633da4


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x86/native/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    7f269ea2d96d8d376f2c7642ddadc7bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x86/native/icudtl.dat
  • net8.0-windows/runtimes/win-x86/native/libEGL.dll
    .dll windows:10 windows x86 arch:x86

    8f9a97bb419cdb8d7e18dd56a95cf8b0


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x86/native/libGLESv2.dll
    .dll windows:10 windows x86 arch:x86

    3885736f3b64cada6a6b0e86a95ded4c


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x86/native/libcef.dll
    .dll windows:10 windows x86 arch:x86

    091869d6d83c0495dc092acf2af9f82d


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x86/native/resources.pak
  • net8.0-windows/runtimes/win-x86/native/snapshot_blob.bin
  • net8.0-windows/runtimes/win-x86/native/v8_context_snapshot.bin
  • net8.0-windows/runtimes/win-x86/native/vk_swiftshader.dll
    .dll windows:10 windows x86 arch:x86

    e24444131575b3d2e071792571476c36


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x86/native/vk_swiftshader_icd.json
  • net8.0-windows/runtimes/win-x86/native/vulkan-1.dll
    .dll windows:10 windows x86 arch:x86

    306d446ace3ed55e62abf80ed2edc956


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/snapshot_blob.bin
  • net8.0-windows/v8_context_snapshot.bin
  • net8.0-windows/vk_swiftshader.dll
    .dll windows:10 windows x64 arch:x64

    cff2e3bc77a72caa699e7cda3a0c38d8


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/vk_swiftshader_icd.json
  • net8.0-windows/vulkan-1.dll
    .dll windows:10 windows x64 arch:x64

    1cca81ae4aa193b35ac4e7a2c9d50b0f


    Headers

    Imports

    Exports

    Sections