General

  • Target

    Wind.rar

  • Size

    960KB

  • MD5

    bcf9caa86564e9f924ef79fa0bbc6ed8

  • SHA1

    3ec658f119cc79f539973cc853764bdac44f8ada

  • SHA256

    7fafb8774dcb5a2e719f240d91488884b5695dbb5459db889de40ccba4dab5d4

  • SHA512

    df2aee11b07be581785cb178224b6685dacd6749878a4425c3c1578afd84637b19f6e5562de74790f36ec004efac70632bddf828224e0c92eca7154226a83311

  • SSDEEP

    12288:Avv9O2XtL/CwywNCeYYDWkiVWT1tCMopK9Pwm3jCRk7z/FX53uMCcuNjliJDWQUV:av9OwtrLDC/MsFpojCRez/FJRuQC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Wind.rar
    .rar
  • Wind/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    86466c337c0f4054f390a6d67e4d3ebf


    Headers

    Imports

    Exports

    Sections

  • Wind/windinject.exe
    .exe windows:6 windows x64 arch:x64

    f4a328fbb9c60c7e1bd2a62c5a0780fe


    Headers

    Imports

    Sections

  • Wind/workspace/IY_FE.iy
  • Wind/workspace/NaikoScript/BreakingPlus/Feature1.txt
  • Wind/workspace/NaikoScript/BreakingPlus/Feature2.txt
  • Wind/workspace/NaikoScript/BreakingPlus/Feature3.txt
  • Wind/workspace/NaikoScript/BreakingPlus/Feature4.txt
  • Wind/workspace/NaikoScript/BreakingPlus/Feature5.txt
  • Wind/workspace/NaikoScript/BreakingPlus/Feature6.txt
  • Wind/workspace/NaikoScript/BreakingPlus/Feature7.txt
  • Wind/workspace/NaikoScript/BreakingPlus/TutSettings.txt
  • Wind/workspace/OrionTest/6035872082.txt
  • Wind/workspace/SimpleSpy/Settings.json
  • Wind/workspace/UQMP9VS6AJxBjr7.lua
  • Wind/workspace/venoxware/6035872082.txt
  • Wind/workspace/venoxware/key.txt
  • Wind/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Wind/zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections

  • Wind/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections