General

  • Target

    Selenus.zip

  • Size

    4.6MB

  • MD5

    c803b4b67df7d25a6286fae3be278874

  • SHA1

    e8b7ba1e30388ae4713d4ed23531800180b7efa0

  • SHA256

    5c492964ebe680878043d659553282497676e548b517f05aa978b879cef422e1

  • SHA512

    05385c942d384f9d14a17e0574ce239eb0d76d46f61d4c04a98e2a9e9113c5b985d6c0175f001d6f6bed1ab5dd0788e0d9ab58c841f9e70c8331604758611de7

  • SSDEEP

    98304:Hk5seqlPEHbDWrD3h8Q5pTKXm1mz9/vxEnC2wxxIkOPTzqGEEgIncdQQP/4VJ:HCsekwH0R8NXl/vznLIk+uGtxnXQn4v

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Selenus.zip
    .zip
  • Injector.exe
    .exe windows:6 windows x64 arch:x64

    07cf1b0dd0d4bd84e4088ab25f438e9b


    Headers

    Imports

    Sections

  • Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/BloxFruits.lua
  • Scripts/CmdX.lua
  • Scripts/GrandPiece.lua
  • Scripts/InfiniteYield.lua
  • Scripts/UncTest.lua
    .js
  • SelenuScript.bin
  • Selenus.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SelenusX.bin
    .dll windows:6 windows x64 arch:x64

    57127fa98e84d836ff1e07fcec0c9958


    Headers

    Imports

    Exports

    Sections

  • autoexec/script.lua
  • binaries/Monaco/base.txt
  • binaries/Monaco/classfunc.txt
  • binaries/Monaco/globalf.txt
  • binaries/Monaco/globalns.txt
  • binaries/Monaco/globalv.txt
  • binaries/Monaco/index.html
    .html .js polyglot
  • binaries/Monaco/vs/base/worker/workerMain.js
    .js
  • binaries/Monaco/vs/basic-languages/bat/bat.js
  • binaries/Monaco/vs/basic-languages/coffee/coffee.js
  • binaries/Monaco/vs/basic-languages/cpp/cpp.js
  • binaries/Monaco/vs/basic-languages/csharp/csharp.js
  • binaries/Monaco/vs/basic-languages/csp/csp.js
  • binaries/Monaco/vs/basic-languages/css/css.js
  • binaries/Monaco/vs/basic-languages/dockerfile/dockerfile.js
  • binaries/Monaco/vs/basic-languages/fsharp/fsharp.js
  • binaries/Monaco/vs/basic-languages/go/go.js
  • binaries/Monaco/vs/basic-languages/handlebars/handlebars.js
    .js
  • binaries/Monaco/vs/basic-languages/html/html.js
    .js
  • binaries/Monaco/vs/basic-languages/ini/ini.js
  • binaries/Monaco/vs/basic-languages/java/java.js
  • binaries/Monaco/vs/basic-languages/less/less.js
  • binaries/Monaco/vs/basic-languages/lua/lua.js
  • binaries/Monaco/vs/basic-languages/markdown/markdown.js
    .js
  • binaries/Monaco/vs/basic-languages/msdax/msdax.js
  • binaries/Monaco/vs/basic-languages/mysql/mysql.js
  • binaries/Monaco/vs/basic-languages/objective-c/objective-c.js
  • binaries/Monaco/vs/basic-languages/pgsql/pgsql.js
  • binaries/Monaco/vs/basic-languages/php/php.js
  • binaries/Monaco/vs/basic-languages/postiats/postiats.js
  • binaries/Monaco/vs/basic-languages/powershell/powershell.js
  • binaries/Monaco/vs/basic-languages/pug/pug.js
  • binaries/Monaco/vs/basic-languages/python/python.js
  • binaries/Monaco/vs/basic-languages/r/r.js
  • binaries/Monaco/vs/basic-languages/razor/razor.js
    .js
  • binaries/Monaco/vs/basic-languages/redis/redis.js
  • binaries/Monaco/vs/basic-languages/redshift/redshift.js
  • binaries/Monaco/vs/basic-languages/ruby/ruby.js
  • binaries/Monaco/vs/basic-languages/rust/rust.js
  • binaries/Monaco/vs/basic-languages/sb/sb.js
  • binaries/Monaco/vs/basic-languages/scss/scss.js
  • binaries/Monaco/vs/basic-languages/solidity/solidity.js
  • binaries/Monaco/vs/basic-languages/sql/sql.js
  • binaries/Monaco/vs/basic-languages/st/st.js
  • binaries/Monaco/vs/basic-languages/swift/swift.js
  • binaries/Monaco/vs/basic-languages/vb/vb.js
  • binaries/Monaco/vs/basic-languages/xml/xml.js
  • binaries/Monaco/vs/basic-languages/yaml/yaml.js
  • binaries/Monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • binaries/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • binaries/Monaco/vs/editor/editor.main.css
  • binaries/Monaco/vs/editor/editor.main.js
    .js
  • binaries/Monaco/vs/editor/editor.main.nls.de.js
  • binaries/Monaco/vs/editor/editor.main.nls.es.js
  • binaries/Monaco/vs/editor/editor.main.nls.fr.js
  • binaries/Monaco/vs/editor/editor.main.nls.it.js
  • binaries/Monaco/vs/editor/editor.main.nls.ja.js
  • binaries/Monaco/vs/editor/editor.main.nls.js
  • binaries/Monaco/vs/editor/editor.main.nls.ko.js
  • binaries/Monaco/vs/editor/editor.main.nls.ru.js
  • binaries/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • binaries/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • binaries/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • binaries/Monaco/vs/language/css/cssMode.js
    .js
  • binaries/Monaco/vs/language/css/cssWorker.js
    .js
  • binaries/Monaco/vs/language/html/htmlMode.js
    .js
  • binaries/Monaco/vs/language/html/htmlWorker.js
    .js
  • binaries/Monaco/vs/language/json/jsonMode.js
    .js
  • binaries/Monaco/vs/language/json/jsonWorker.js
    .js
  • binaries/Monaco/vs/language/typescript/lib/typescriptServices.js
    .js
  • binaries/Monaco/vs/language/typescript/tsMode.js
    .js
  • binaries/Monaco/vs/language/typescript/tsWorker.js
    .js
  • binaries/Monaco/vs/loader.js
    .js
  • binaries/key.txt
  • runtimes/win-arm64/native/WebView2Loader.dll
  • runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workspace.lnk
    .lnk