General

  • Target

    ac8d8f9f6cf8b2e24f7e2ef6a1e08502d01e31e8486468839b4e6eead2c94888

  • Size

    9.6MB

  • MD5

    a9650b57fb437fd5d5c6b70d4f92c3bc

  • SHA1

    0302bb28be074788e88c355977d6d8531466d2f7

  • SHA256

    ac8d8f9f6cf8b2e24f7e2ef6a1e08502d01e31e8486468839b4e6eead2c94888

  • SHA512

    1a31d77548037ce3accb3fa42241bbca313d6b96cdc070cba97a8b106771f18ab582d160553612c200cf0af4dd282375c8e781fd0846c02a1bcb86784ba66b94

  • SSDEEP

    196608:UsXHHGlPvCFc56FE6zCdXU7abG0wfP8hpS3c/RnpCOYdEICs9Yv4eCsV0qfbPXP:U7lPaFcEFEx1UWbGUzC8CpdEhv4eCtqz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ac8d8f9f6cf8b2e24f7e2ef6a1e08502d01e31e8486468839b4e6eead2c94888
    .zip
  • Xshellplus/ColorSchemes/ANSI Colors on Black.scs
  • Xshellplus/ColorSchemes/ANSI Colors on White.scs
  • Xshellplus/ColorSchemes/Afterglow.scs
  • Xshellplus/ColorSchemes/Arthur.scs
  • Xshellplus/ColorSchemes/Belafonte Day.scs
  • Xshellplus/ColorSchemes/Black on White.scs
  • Xshellplus/ColorSchemes/Chalk.scs
  • Xshellplus/ColorSchemes/Chalkboard.scs
  • Xshellplus/ColorSchemes/Earthsong.scs
  • Xshellplus/ColorSchemes/Espresso.scs
  • Xshellplus/ColorSchemes/IR_Black.scs
  • Xshellplus/ColorSchemes/New Black.scs
  • Xshellplus/ColorSchemes/New White.scs
  • Xshellplus/ColorSchemes/Obsidian.scs
  • Xshellplus/ColorSchemes/Pastel on Black.scs
  • Xshellplus/ColorSchemes/Pastel on White.scs
  • Xshellplus/ColorSchemes/White on Black.scs
  • Xshellplus/ColorSchemes/XTerm.scs
  • Xshellplus/ColorSchemes/codeschool.scs
  • Xshellplus/ColorSchemes/idleToes.scs
  • Xshellplus/CrashRpt.dll
    .dll windows:6 windows x86 arch:x86

    1d2e5d0ab9f3ec5b52679b515d11cb7a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/CrashSender.exe
    .exe windows:5 windows x86 arch:x86

    7d602c077a3fa8cadf6edc5ef98e6643


    Code Sign

    Headers

    Imports

    Sections

  • Xshellplus/CustomKeyMap.ckm
  • Xshellplus/HighlightSample/New Highlight Set (Sample).hls
  • Xshellplus/Languages/XagentCHS.dll
    .dll windows:5 windows x86 arch:x86

    37bf03c0292c10278975009ebf71869a


    Code Sign

    Headers

    Imports

    Sections

  • Xshellplus/Languages/XftpCHS.dll
    .dll windows:5 windows x86 arch:x86

    37bf03c0292c10278975009ebf71869a


    Code Sign

    Headers

    Imports

    Sections

  • Xshellplus/Languages/XshellCHS.dll
    .dll windows:5 windows x86 arch:x86

    37bf03c0292c10278975009ebf71869a


    Code Sign

    Headers

    Imports

    Sections

  • Xshellplus/Languages/XshellCoreCHS.dll
    .dll windows:5 windows x86 arch:x86

    37bf03c0292c10278975009ebf71869a


    Code Sign

    Headers

    Imports

    Sections

  • Xshellplus/Languages/XtransportCHS.dll
    .dll windows:5 windows x86 arch:x86

    37bf03c0292c10278975009ebf71869a


    Code Sign

    Headers

    Imports

    Sections

  • Xshellplus/ScriptSample/Screen/xshell_screen.js
    .js
  • Xshellplus/ScriptSample/Screen/xshell_screen.py
  • Xshellplus/ScriptSample/Screen/xshell_screen.vbs
    .vbs
  • Xshellplus/ScriptSample/Session/xshell_session.js
    .js
  • Xshellplus/ScriptSample/Session/xshell_session.py
  • Xshellplus/ScriptSample/Session/xshell_session.vbs
  • Xshellplus/SessionConverter.exe
    .exe windows:5 windows x86 arch:x86

    b1cdf1d384c2cd26c9fa4f0ea08c4bbe


    Code Sign

    Headers

    Imports

    Sections

  • Xshellplus/Xagent.exe
    .exe windows:6 windows x86 arch:x86

    1e8bb8e7bc4e2f9f614e007ebfca792d


    Code Sign

    Headers

    Imports

    Sections

  • Xshellplus/Xftp.exe
    .exe windows:6 windows x86 arch:x86

    9d5fab8b705a1ea2901fa206c3f812a3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/Xftp.ini
  • Xshellplus/Xshell.exe
    .exe windows:6 windows x86 arch:x86

    7395ba40f053ac33ec25639feb3f4461


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/Xshell.ini
  • Xshellplus/XshellCore.exe
    .exe windows:6 windows x86 arch:x86

    8a99147e73365e94b723b254c04366dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/XshellCore.tlb
  • Xshellplus/XshellLib.dll
    .dll windows:6 windows x86 arch:x86

    3923f730e06efadd3cdb7ae6508e5dbf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/Xtransport.exe
    .exe windows:6 windows x86 arch:x86

    abd7dc070dde3230b4f47bd855ced137


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/crashrpt_lang.ini
  • Xshellplus/default
  • Xshellplus/example.tkm
  • Xshellplus/filexfer.dat
  • Xshellplus/jsoncpp.dll
    .dll windows:6 windows x86 arch:x86

    270ac8580447e5dbd61821a938aabe23


    Headers

    Imports

    Exports

    Sections

  • Xshellplus/msvcp110.dll
    .dll windows:6 windows x86 arch:x86

    098e9eddf1a24b3fd9465ee992148a02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/msvcr110.dll
    .dll windows:6 windows x86 arch:x86

    e057a95f8936f77238b048f253956b3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/nsactivate.dll
    .dll windows:6 windows x86 arch:x86

    b2861950e7dbfed9eb01217bca1f4342


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/nslicense.dll
    .dll windows:6 windows x86 arch:x86

    3f15e656eb6d93612e89f2af4c97898c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/nsprofile2.dll
    .dll windows:6 windows x86 arch:x86

    d2cd9a80950217c6eea9aead4d18bb8a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/nsregister.exe
    .exe windows:6 windows x86 arch:x86

    9f63e78a2fed6cb50155da10619ad460


    Code Sign

    Headers

    Imports

    Sections

  • Xshellplus/nsresource.dll
    .dll windows:6 windows x86 arch:x86

    a786d91a40d339d8cbab1d293804c0dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/nssecurity.dll
    .dll windows:6 windows x86 arch:x86

    00a7146082f630f928af7760fa97d374


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/nssftp.dll
    .dll windows:6 windows x86 arch:x86

    d1f83a319bfafd1dcc8661888ad802dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/nssock2.dll
    .dll windows:6 windows x86 arch:x86

    4ce4c217580c6aa39dbaada7167d0279


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/nsssh3.dll
    .dll windows:6 windows x86 arch:x86

    d76f4d37c5e74ac5c9edb04e06af56db


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/nsutil2.dll
    .dll windows:6 windows x86 arch:x86

    35c84eedef55bc078a9d8dbfd1434798


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Xshellplus/python38.dll
    .dll windows:6 windows x86 arch:x86

    4e6ddafb4dbe3e9b050630d3a06fc0bc


    Headers

    Imports

    Exports

    Sections