General

  • Target

    wind.zip

  • Size

    9.3MB

  • MD5

    81965bd01da3364a6b0aec2233382ecb

  • SHA1

    416f427accc538ecab5bf359fcd9aa78b61fff5a

  • SHA256

    664ea867ffbc87df3cff11b7c14074aea1a60748cd362f95173d71e787924a6d

  • SHA512

    8e9f221426b1d23dba3fdd65a6f986f314091a37d4d3e4e61975cfccf8317a0555fe32dd11fd88ded148c8b55f55fecfce3d7b80f59116f0cbb6d14ed0819627

  • SSDEEP

    196608:ZC9qKi/9fpa1UaN66Xcp6JMneea+G6XvonEsX0kIsRc/J:Y9HApa1cWGe4GsonESIJJ

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • wind.zip
    .zip
  • injecter.exe
    .exe windows:6 windows x64 arch:x64

    f4a328fbb9c60c7e1bd2a62c5a0780fe


    Headers

    Imports

    Sections

  • libcurl.dll
    .dll windows:6 windows x64 arch:x64

    86466c337c0f4054f390a6d67e4d3ebf


    Headers

    Imports

    Exports

    Sections

  • scripts/injecterV.exe
    .exe windows:6 windows x64 arch:x64

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • cstealer.pyc
  • start.bat
  • windV2.py
  • workspace/IY_FE.iy
  • workspace/NaikoScript/BreakingPlus/Feature1.txt
  • workspace/NaikoScript/BreakingPlus/Feature2.txt
  • workspace/NaikoScript/BreakingPlus/Feature3.txt
  • workspace/NaikoScript/BreakingPlus/Feature4.txt
  • workspace/NaikoScript/BreakingPlus/Feature5.txt
  • workspace/NaikoScript/BreakingPlus/Feature6.txt
  • workspace/NaikoScript/BreakingPlus/Feature7.txt
  • workspace/NaikoScript/BreakingPlus/TutSettings.txt
  • workspace/OrionTest/6035872082.txt
  • workspace/SimpleSpy/Settings.json
  • workspace/UQMP9VS6AJxBjr7.lua
  • workspace/venoxware/6035872082.txt
  • workspace/venoxware/key.txt
  • xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections

  • zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections