General

  • Target

    Hetor.rar

  • Size

    54.1MB

  • MD5

    8984b1c73b36ad80c954fb41a95ed657

  • SHA1

    dbfa6a0624d44a6da56c93e50435f70d669de059

  • SHA256

    d7932aa08d92bc37db21f6138ead0b23d781f3b5932ff53239ba4201a8579b7d

  • SHA512

    795f526788baffb078d8330ac3f7cf48e3e8a2a508ae350674b3c76047c3438d60dabb530634d2bc9efc95a422bb0d848c7442c17bce8ada0938b4d844c86c66

  • SSDEEP

    786432:lZgImkE7cRP5d0Yso4hSCQ+1JJe5/Gx/3Lrh/A4RGHlB/bd18DGbUpyEAcAYEPWm:libktrH/amGF3/hI6szLEGgp07PWzLO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Hetor.rar
    .rar

    Password: 1825

  • Hetor.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1825

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • dll/AcXtrnal.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1825

    d5e684c2960f27fa0d1818bb9f6d8d03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1825

    1cd41c0abd9e652b8c20ad73c41f45e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/accore.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1825

    d160f055904c1d8bb1f9a35edebbfd45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/acproxy.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1825

    ddec9c0ad1b79349ee08e9fb9defe28e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/alibabacloud-oss-cpp-sdk.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1825

    7d8de00ef9bfbb837180b559954998f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/kernel32.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1825

    31328a3cacc162a9ceb1ef6ec692fcb4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/libGLESV2.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1825

    abea2434f9b7d3b2a3c225bb90b22116


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/libeay32.dll
    .dll windows:6 windows x86 arch:x86

    0ab3c0ccca6cffc5857fa9eaa9166822


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/mfc140.dll
    .dll windows:6 windows x64 arch:x64

    79866bf350529b983a801759067cf66d


    Code Sign

    Headers

    Imports

    Sections

  • dll/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/pakchunk10optional-WindowsClient.utoc
  • dll/wininet.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    6adb8f4093077f6949dd162da29572bb


    Headers

    Imports

    Exports

    Sections

  • translations/qt_ca.qm
  • translations/qt_cs.qm
  • translations/qt_de.qm
  • translations/qt_en.qm
  • translations/qt_fi.qm
  • translations/qt_fr.qm
  • translations/qt_he.qm
  • translations/qt_hu.qm
  • translations/qt_it.qm
  • translations/qt_ja.qm
  • translations/qt_ko.qm
  • translations/qt_lv.qm
  • translations/qt_ru.qm
  • translations/qt_sk.qm
  • translations/qt_uk.qm
  • ult.ucas