Resubmissions

08/08/2024, 06:05

240808-gtgl2atfqc 7

08/08/2024, 05:52

240808-gkwplazfrj 7

General

  • Target

    TPM BYPASS [ANYDEVICE].zip

  • Size

    80KB

  • MD5

    cd213c571dc5aa34bc8ad79de919e0b7

  • SHA1

    7da2b277fd71e2b28b973eec9a9d67eca3968863

  • SHA256

    f259823af8f405dbfc0665d54c639dc7b74ebc03d06d1fc72554b607c720fa08

  • SHA512

    959dbe7b190b381606a4d9e97c27f2752f49c53aa9d4e0df2907bfe55201f223b21ecccbe087e9d7e4e51abad76be8dd4c0367838195aad75329d1106761033a

  • SSDEEP

    1536:2BTwUsCRd+3YNN8BWQhfEzN6TFEfHl0x5OTlnCOCOCp+RtHdHAq5vEpZY:gTwKAYNh+sz8KN0XOJC1IXHt8pW

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • TPM BYPASS [ANYDEVICE].zip
    .zip
  • TPM BYPASS [ANYDEVICE]/Mapper.exe
    .exe windows:6 windows x64 arch:x64

    d82bf8ddd2e00bd8d00474103b0c2224


    Headers

    Imports

    Sections

  • TPM BYPASS [ANYDEVICE]/TPM.sys
    .sys windows:10 windows x64 arch:x64

    c9e50c2003af9359119f45636aee1f81


    Headers

    Imports

    Sections

  • TPM BYPASS [ANYDEVICE]/TPM_RESET.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections