General

  • Target

    FluxoWindows Beta.zip

  • Size

    26.1MB

  • MD5

    89f5637c0b6b2d588dd31c8d78f930c3

  • SHA1

    e40236840e95bc53b5097157e18684e5a5931127

  • SHA256

    d6157eee99b2449d93f3f60a6b4938ef4e7b3f66b9c1c370cecaefb21062b7c4

  • SHA512

    77c26e8f60a5f0cdf8e54a68feb83149f4297d57b37bb87be6707a7b7ee14cceba2e79eb742484de5fb743e79fc411c23f38dfd1ba3d282e59a10ed851996dea

  • SSDEEP

    786432:Slmh0bl9LBwXKpW7TE8ofBbBu88bV2DagPr:Sl9bNYkXBMLVgfr

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • FluxoWindows Beta.zip
    .zip
  • Something.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • autoexec/autoexec.txt
  • bin/auth.dll
    .dll windows:6 windows x64 arch:x64

    dfd11645eb4732c0409f51f0532c3683


    Headers

    Imports

    Exports

    Sections

  • main.exe
    .exe windows:6 windows x64 arch:x64

    0a1244f1a4638d06c519228963178a8a


    Headers

    Imports

    Exports

    Sections

  • workspace/.tests/appendfile.txt
  • workspace/.tests/getcustomasset.txt
  • workspace/.tests/isfile.txt
  • workspace/.tests/listfiles/test_1.txt
  • workspace/.tests/listfiles/test_2.txt
  • workspace/.tests/loadfile.txt
  • workspace/.tests/readfile.txt
  • workspace/.tests/writefile
  • workspace/.tests/writefile.txt