Resubmissions

24/08/2024, 12:32

240824-pq5tfszfjh 8

24/08/2024, 12:29

240824-pn6yqszekb 8

24/08/2024, 12:27

240824-pm1ekazdmg 8

General

  • Target

    Release.rar

  • Size

    1.8MB

  • MD5

    dc378d8293b582cbc9a8d06ce4875c8f

  • SHA1

    c2073b5c67cc50739497695920affaa206b2b8eb

  • SHA256

    a275aa99709d2832d39e64638bea5ef0691871837f068ffef28523d8d5d54856

  • SHA512

    5325a167a08d12e28614696f46615946506e843e4ca5e26b35af3695ea3c5494ad2217dae8ec5cb72cc7502d7595efc5d4cda9803c06c285a818a2268e9e5e27

  • SSDEEP

    49152:E+uBvSUM6xujVh6MLtW3iKqEQjLro8d/iX8w5hU:sBqUM6xuj5/ieroMiMR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Release.rar
    .rar
  • Release/GeforceNOW.exe
    .exe windows:6 windows x64 arch:x64

    426ca4659c25f40c32df2b82ae4835eb


    Headers

    Imports

    Sections

  • Release/GeforceNOW.pdb
  • Release/mapper.exe
    .exe windows:6 windows x64 arch:x64

    87877434cc5ccb8c3f984e3dd6b73bb9


    Headers

    Imports

    Sections

  • Release/racballs.sys
    .sys windows:10 windows x64 arch:x64

    dab06766af6787054a656ec789a0ae81


    Code Sign

    Headers

    Imports

    Sections