General

  • Target

    ace26c49520805fe9cc8c180edb23118dd044600dec444d7a3cb9ec5f21438c1.zip

  • Size

    6.8MB

  • MD5

    2ff21bb3c336fc728a07a68a2e13ce5a

  • SHA1

    6051cd447b9d210846f71c0f18fb51818af2e188

  • SHA256

    ace26c49520805fe9cc8c180edb23118dd044600dec444d7a3cb9ec5f21438c1

  • SHA512

    bc2cc467c6715a6ed99ef95cab174aad1526ad94bf6cc1fb59dd41049e9e74d265248bd51817fd45c81521e1d380284c14025ac29006b9996662fb68b09d4a2d

  • SSDEEP

    196608:XGr7A5gyavJB3FDj+IQFm8Oqdhae9NrJJcdAD0JvFMw+TisDU:2H4gxJBVDPOmOHrJJND0JvFMBT5DU

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ace26c49520805fe9cc8c180edb23118dd044600dec444d7a3cb9ec5f21438c1.zip
    .zip
  • BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • EIUWI383IE
    .exe windows:6 windows x64 arch:x64

    6112f9b1e42d955dcdca0fb4ff5ab2f9


    Code Sign

    Headers

    Imports

    Sections

  • SQLite.Interop.dll
    .dll windows:6 windows x64 arch:x64

    d99c34fbf4a27bd49bd158efcb5d8cc5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • System.Buffers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Data.SQLite.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Numerics.Vectors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Runtime.CompilerServices.Unsafe.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Text.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • concrt140.dll
    .dll windows:6 windows x86 arch:x86

    f2b3df05bf4af79c11bdb712e26b04be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • configs.xml
  • libEGL.dll
    .dll windows:5 windows x86 arch:x86

    c6ec092a26e9a149b7d4b0028f289ae7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    06cc814dbeda830328b76c5b11d9db1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    20717227ccb65afbaea7feeb74196ea2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sounds/1.wav
  • sounds/2.wav
  • sounds/3.wav
  • sounds/4.wav
  • terabox_license.pdf
    .pdf
    • http://cryptsoft.com

    • http://en.wikipedia.org/wiki/MIT_License

    • http://haxx.se

    • http://openssl.org

    • http://www.grinninglizard.com

    • http://www.openssl.org

    • http://www.zlib.net

    • http://www.zlib.net/

    • http://www.zlib.org/rfc-deflate.html

    • Show all
  • terabox_logo.ico
  • tier0_s64.dll
    .dll windows:6 windows x64 arch:x64

    d1fb06470359e39b61f6d0f9bc4af4c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    e44143d5ae0c7f7d377cee38e4466c05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    72707e942878aac770fcc118ce3ec1c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vstdlib_s64.dll
    .dll windows:4 windows x64 arch:x64

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Exports

    Sections