General

  • Target

    z proton v5 updated.ZIP

  • Size

    129.3MB

  • MD5

    f675a7fa8c76bc61d21ca8aba6f524fd

  • SHA1

    98a60da2710439f4c39efd768fdf895e12d7958d

  • SHA256

    368f379e33551bc40cb289e2bb773245e3300723be4f1a95574f02c25759a440

  • SHA512

    53140ed504e64f8b526b3149468d1bb1b468b86a223b9825beafd0e381e81509cd5d20a3a29a4a8602a1beb3f6e2c3841d7b67092342457b53b8a6895304e676

  • SSDEEP

    3145728:ulVqCrHX5sOu6Mt87pRuvSC6j+Hghnawxq/zhaVgkCOCvL:kkCjJfM+7pRuxe+ApfILAnC3

Score
10/10

Malware Config

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • z proton v5 updated.ZIP
    .zip

    Password: 123

  • Bunifu_UI_v1.5.3.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CefSharp.BrowserSubprocess.Core.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    c779ad37aed19e8334136882f34346cb


    Headers

    Imports

    Exports

    Sections

  • CefSharp.BrowserSubprocess.Core.pdb
  • CefSharp.BrowserSubprocess.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • CefSharp.BrowserSubprocess.pdb
  • CefSharp.Core.Runtime.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    c65882f7be357f2fbaf688cc11895090


    Headers

    Imports

    Exports

    Sections

  • CefSharp.Core.Runtime.pdb
  • CefSharp.Core.Runtime.xml
    .xml
  • CefSharp.Core.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CefSharp.Core.pdb
  • CefSharp.Core.xml
    .js .xml polyglot
  • CefSharp.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CefSharp.WinForms.pdb
  • CefSharp.WinForms.xml
    .xml
  • CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CefSharp.pdb
  • CefSharp.xml
    .xml
  • Guna.UI.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Monaco/Monaco.html
    .js
  • Monaco/base.txt
  • Monaco/classfunc.txt
  • Monaco/globalf.txt
  • Monaco/globalns.txt
  • Monaco/globalv.txt
  • Monaco/vs/base/worker/workerMain.js
    .js
  • Monaco/vs/basic-languages/bat/bat.js
  • Monaco/vs/basic-languages/coffee/coffee.js
  • Monaco/vs/basic-languages/cpp/cpp.js
  • Monaco/vs/basic-languages/csharp/csharp.js
  • Monaco/vs/basic-languages/csp/csp.js
  • Monaco/vs/basic-languages/css/css.js
  • Monaco/vs/basic-languages/dockerfile/dockerfile.js
  • Monaco/vs/basic-languages/fsharp/fsharp.js
  • Monaco/vs/basic-languages/go/go.js
  • Monaco/vs/basic-languages/handlebars/handlebars.js
    .js
  • Monaco/vs/basic-languages/html/html.js
    .js
  • Monaco/vs/basic-languages/ini/ini.js
  • Monaco/vs/basic-languages/java/java.js
  • Monaco/vs/basic-languages/less/less.js
  • Monaco/vs/basic-languages/lua/lua.js
  • Monaco/vs/basic-languages/markdown/markdown.js
    .js
  • Monaco/vs/basic-languages/msdax/msdax.js
  • Monaco/vs/basic-languages/mysql/mysql.js
  • Monaco/vs/basic-languages/objective-c/objective-c.js
  • Monaco/vs/basic-languages/pgsql/pgsql.js
  • Monaco/vs/basic-languages/php/php.js
  • Monaco/vs/basic-languages/postiats/postiats.js
  • Monaco/vs/basic-languages/powershell/powershell.js
  • Monaco/vs/basic-languages/pug/pug.js
  • Monaco/vs/basic-languages/python/python.js
  • Monaco/vs/basic-languages/r/r.js
  • Monaco/vs/basic-languages/razor/razor.js
    .js
  • Monaco/vs/basic-languages/redis/redis.js
  • Monaco/vs/basic-languages/redshift/redshift.js
  • Monaco/vs/basic-languages/ruby/ruby.js
  • Monaco/vs/basic-languages/rust/rust.js
  • Monaco/vs/basic-languages/sb/sb.js
  • Monaco/vs/basic-languages/scss/scss.js
  • Monaco/vs/basic-languages/solidity/solidity.js
  • Monaco/vs/basic-languages/sql/sql.js
  • Monaco/vs/basic-languages/st/st.js
  • Monaco/vs/basic-languages/swift/swift.js
  • Monaco/vs/basic-languages/vb/vb.js
  • Monaco/vs/basic-languages/xml/xml.js
  • Monaco/vs/basic-languages/yaml/yaml.js
  • Monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • Monaco/vs/editor/editor.main.css
  • Monaco/vs/editor/editor.main.js
    .js
  • Monaco/vs/editor/editor.main.nls.de.js
  • Monaco/vs/editor/editor.main.nls.es.js
  • Monaco/vs/editor/editor.main.nls.fr.js
  • Monaco/vs/editor/editor.main.nls.it.js
  • Monaco/vs/editor/editor.main.nls.ja.js
  • Monaco/vs/editor/editor.main.nls.js
  • Monaco/vs/editor/editor.main.nls.ko.js
  • Monaco/vs/editor/editor.main.nls.ru.js
  • Monaco/vs/editor/editor.main.nls.zh-cn.js
  • Monaco/vs/editor/editor.main.nls.zh-tw.js
  • Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • Monaco/vs/language/css/cssMode.js
    .js
  • Monaco/vs/language/css/cssWorker.js
    .js
  • Monaco/vs/language/html/htmlMode.js
    .js
  • Monaco/vs/language/html/htmlWorker.js
    .js
  • Monaco/vs/language/json/jsonMode.js
    .js
  • Monaco/vs/language/json/jsonWorker.js
    .js
  • Monaco/vs/language/typescript/lib/typescriptServices.js
    .js
  • Monaco/vs/language/typescript/tsMode.js
    .js
  • Monaco/vs/language/typescript/tsWorker.js
    .js
  • Monaco/vs/loader.js
    .js
  • Scripts/AimBot + ESP.txt
    .js
  • Scripts/Bang Scripts.lua
  • Scripts/Beamed Da hood.txt
  • Scripts/Brick Admin.txt
  • Scripts/Chat Bypass Neptune.txt
  • Scripts/Console Output Color.txt
    .js
  • Scripts/Crash Roblox (You only).txt
  • Scripts/Da Hood Script.txt
  • Scripts/Diddy Plink Silex Hub.txt
  • Scripts/ESP Advanced.txt
  • Scripts/Infinite Yield.txt
    .js
  • Scripts/Neko Script.txt
  • Scripts/Prison Life Sensation.txt
  • Scripts/Sanity Aimbot GUI (Key).txt
  • Scripts/Test.txt
  • Scripts/Tiger 3.0.txt
    .js
  • Scripts/UNC.txt
    .js
  • Scripts/Vape V4.txt
  • Scripts/WalkSpeed.txt
  • Siticone.UI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SolvexLoader.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Test v5.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Test v5.exe.config
  • Test v5.pdb
  • bin/CeleryIn.bin
    .dll windows:6 windows x64 arch:x64

    57127fa98e84d836ff1e07fcec0c9958


    Headers

    Imports

    Exports

    Sections

  • bin/CeleryScript.bin
  • bin/Injector.exe
    .exe windows:6 windows x64 arch:x64

    acdd2d8a01d9a91b6e465d635e753fec


    Headers

    Imports

    Sections

  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • chrome_elf.dll
    .dll windows:10 windows x86 arch:x86

    4cfb23140492af37bcc393a0d4633da4


    Headers

    Imports

    Exports

    Sections

  • d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    7f269ea2d96d8d376f2c7642ddadc7bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • debug.log
  • icudtl.dat
  • libEGL.dll
    .dll windows:10 windows x86 arch:x86

    8f9a97bb419cdb8d7e18dd56a95cf8b0


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:10 windows x86 arch:x86

    3885736f3b64cada6a6b0e86a95ded4c


    Headers

    Imports

    Exports

    Sections

  • libcef.dll
    .dll windows:10 windows x86 arch:x86

    091869d6d83c0495dc092acf2af9f82d


    Headers

    Imports

    Exports

    Sections

  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
    .ps1
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • resources.pak
  • savedData.txt
  • snapshot_blob.bin
  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:10 windows x86 arch:x86

    e24444131575b3d2e071792571476c36


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:10 windows x86 arch:x86

    306d446ace3ed55e62abf80ed2edc956


    Headers

    Imports

    Exports

    Sections