General

  • Target

    Storage.rar

  • Size

    8.3MB

  • MD5

    48f6053a1a391158ff527c0d7df8d103

  • SHA1

    b5690f2004902c35002844dfe8ed23518b7db811

  • SHA256

    2aa84c90632070b3fb2d9d6756f3a7dd49300ce66eea7c55042875aa3c92190a

  • SHA512

    28345e4e9762d3c43cc4ddc15055f2563b46e00c24646bbd0de4af3a2de9bbb29859fcb747d018f594701aa9b67fcd905515db8a3ea1ee70b54f8bbef042db53

  • SSDEEP

    196608:UgxIhVu1H0hviP9YtMeQ8pO2OgGaYDQpcmkdZicQNco6DOODRheEe:UgyhVuC1iP9YtM78pOXdNZUNOdhre

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Storage.rar
    .rar
  • Storage/Bin/Injector.exe
    .exe windows:6 windows x64 arch:x64

    076acaa656f74379ef1e60670f0fed54


    Headers

    Imports

    Exports

    Sections

  • Storage/Bin/Rebel.dll
    .dll windows:6 windows x64 arch:x64

    5dbd05d0457a91e7c32b011f85e7842c


    Headers

    Imports

    Exports

    Sections

  • Storage/CRACKEDLOL.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Storage/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Storage/FastColoredTextBox.xml
    .xml
  • Storage/System.CodeDom.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Storage/System.CodeDom.xml