Resubmissions

16/08/2024, 16:11

240816-tmzv9axepq 3

16/08/2024, 16:10

240816-tmh8haxenp 10

14/08/2024, 16:40

240814-t6rzrascqh 10

General

  • Target

    ws.zip

  • Size

    1.3MB

  • MD5

    e85f4223e3d2ae3f0f3ba4566db7d4c1

  • SHA1

    3bb7806cfaa2f89753353b54cc4c063de45b1d16

  • SHA256

    ff2ac477f84ecd0c6bf4e864b1365d0ec164cd848fafe378686748d2e19f613d

  • SHA512

    2ba0d5a26f5adcdedb3c0983e763ab1a628408a508641dedb2c675747d3543277357a6cc9baaa208fe0a75fe7bad8838d28a8fcb582499e7468966ce9302f958

  • SSDEEP

    24576:lVvEP51CWhUilho3dNnsyuf1/zVjrU1lFbnD6W5AnwGS2DKaoIh3juyf9kXRXyPY:lVv6jWivKsJ1hUfZnm8AdxnNzkXRyP4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • ws.zip
    .zip
  • ws/Scylla_v0.9.8/Plugins/ImpRec_Plugins/Imprec_Wrapper_DLL.dll
    .dll windows:5 windows x86 arch:x86

    2cc949eb4a30d30d1f52f498bbe8b989


    Headers

    Imports

    Sections

  • ws/Scylla_v0.9.8/Plugins/ImpRec_Plugins/PECompact 2.7.x.dll
    .dll windows:4 windows x86 arch:x86

    ff22697165d98bb65eb88dc24cc02224


    Headers

    Imports

    Exports

    Sections

  • ws/Scylla_v0.9.8/Plugins/Include_Headers/ScyllaPlugin.h
  • ws/Scylla_v0.9.8/Plugins/PECompact.dll
    .dll windows:5 windows x86 arch:x86

    975af53aefe81e8a738538bdcad22789


    Headers

    Imports

    Exports

    Sections

  • ws/Scylla_v0.9.8/Plugins/PESpin_x64_v1.dll
    .dll windows:5 windows x64 arch:x64

    1c111dfbeaca7d25a4d7a0291a58856c


    Headers

    Imports

    Exports

    Sections

  • ws/Scylla_v0.9.8/Plugins/ScyllaToImprecTree.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ws/Scylla_v0.9.8/Plugins/Sources/Imprec_Wrapper_DLL.cpp
  • ws/Scylla_v0.9.8/Plugins/Sources/PECompact.cpp
  • ws/Scylla_v0.9.8/Plugins/Sources/PESpin_x64_v1.cpp
  • ws/Scylla_v0.9.8/Plugins/Sources/scyllatoimprectree.rar
    .rar
  • ScyllaToImprecTree.sln
  • ScyllaToImprecTree/Form1.Designer.cs
  • ScyllaToImprecTree/Form1.cs
  • ScyllaToImprecTree/Form1.resx
    .vbs
  • ScyllaToImprecTree/Program.cs
  • ScyllaToImprecTree/Properties/AssemblyInfo.cs
  • ScyllaToImprecTree/Properties/Resources.Designer.cs
    .vbs
  • ScyllaToImprecTree/Properties/Resources.resx
    .vbs
  • ScyllaToImprecTree/Properties/Settings.Designer.cs
  • ScyllaToImprecTree/Properties/Settings.settings
  • ScyllaToImprecTree/ScyllaToImprecTree.csproj
  • ScyllaToImprecTree/app.config
    .xml
  • ws/Scylla_v0.9.8/Scylla.ini
  • ws/Scylla_v0.9.8/Scylla_Exports.txt
  • ws/Scylla_v0.9.8/Scylla_README.txt
  • ws/Scylla_v0.9.8/Scylla_x64.dll
    .dll windows:5 windows x64 arch:x64

    a4b192fb7f7c9235dafc61f7c2ce1c63


    Headers

    Imports

    Exports

    Sections

  • ws/Scylla_v0.9.8/Scylla_x64.exe
    .exe windows:5 windows x64 arch:x64

    bcac76bb6976db70842f08f6e2e54ce6


    Headers

    Imports

    Sections

  • ws/Scylla_v0.9.8/Scylla_x64.lib
  • ws/Scylla_v0.9.8/Scylla_x64.map
  • ws/Scylla_v0.9.8/Scylla_x86.dll
    .dll windows:5 windows x86 arch:x86

    e6bc99b225199cc89f30d44d09453207


    Headers

    Imports

    Exports

    Sections

  • ws/Scylla_v0.9.8/Scylla_x86.exe
    .exe windows:5 windows x86 arch:x86

    13f803d90a1a8166ecfc4197841a663f


    Headers

    Imports

    Sections

  • ws/Scylla_v0.9.8/Scylla_x86.lib
  • ws/Scylla_v0.9.8/Scylla_x86.map
  • ws/Windowsecurity.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections