General

  • Target

    shollrussia.rar

  • Size

    5.2MB

  • MD5

    37cbc8e2984692b482baf3c7a63caf0e

  • SHA1

    4f6b410e8236bde9680bf0d763de7da70582f2cd

  • SHA256

    c087eeefacdfcce51e9d4218832a522eef4bf7058ebc3390e98298b04859412e

  • SHA512

    9211151d2acac76e7cd36ae3508fe9827153703af533bd16eb6652a5271e25f0bba83702cfec5efacd34e1d7882fb5f2450e1e332adfd652680fcd659e968799

  • SSDEEP

    98304:GDQJn0HuTNrL8l2Fxxhg/ZwW8Z3rvcQvaJGtBBbko65tztUJmgx6fHF:GsXTRRFxxm/CW8BxvaJCFnYzpfl

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • shollrussia.rar
    .rar
  • BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • EIUWI383IE
    .exe windows:6 windows x64 arch:x64

    6112f9b1e42d955dcdca0fb4ff5ab2f9


    Code Sign

    Headers

    Imports

    Sections

  • SQLite.Interop.dll
    .dll windows:6 windows x64 arch:x64

    d99c34fbf4a27bd49bd158efcb5d8cc5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • System.Buffers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Data.SQLite.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Numerics.Vectors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Runtime.CompilerServices.Unsafe.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Text.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • concrt140.dll
    .dll windows:6 windows x86 arch:x86

    f2b3df05bf4af79c11bdb712e26b04be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • configs.xml
  • libEGL.dll
    .dll windows:5 windows x86 arch:x86

    c6ec092a26e9a149b7d4b0028f289ae7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    06cc814dbeda830328b76c5b11d9db1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    20717227ccb65afbaea7feeb74196ea2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sounds/1.wav
  • sounds/2.wav
  • sounds/3.wav
  • sounds/4.wav
  • terabox_license.pdf
    .pdf
    • http://cryptsoft.com

    • http://en.wikipedia.org/wiki/MIT_License

    • http://haxx.se

    • http://openssl.org

    • http://www.grinninglizard.com

    • http://www.openssl.org

    • http://www.zlib.net

    • http://www.zlib.net/

    • http://www.zlib.org/rfc-deflate.html

    • Show all
  • terabox_logo.ico
  • tier0_s64.dll
    .dll windows:6 windows x64 arch:x64

    d1fb06470359e39b61f6d0f9bc4af4c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    e44143d5ae0c7f7d377cee38e4466c05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    72707e942878aac770fcc118ce3ec1c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vstdlib_s64.dll
    .dll windows:4 windows x64 arch:x64

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Exports

    Sections