General

  • Target

    lnjеctor.zip

  • Size

    68.5MB

  • MD5

    9083834f88697784664580e0dd7d88ee

  • SHA1

    89143eee21d6a9863ab93f41444e6b03e2c0f25c

  • SHA256

    775e30be5a3b7a9010189733aced1b170c52af0a78816d0f2be9508ba2280b79

  • SHA512

    b85600c42612b2c273da0c279f6a38260b378754e1b316d009906deaa3fb461ad776d5d5790bfddde6785721f2668126e792c23d275e3f3e877b78f0c54ac54b

  • SSDEEP

    1572864:C79r11UYrq/Dkaf0i4O48AxefJiIDLYVXC50WV1VAD7aNy8zw4m6ytQr:C79h1UYrq7Ff0i4OugfJisLYVGz1VAy/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • lnjеctor.zip
    .zip

    Password: 4545

  • Macro/Countries.bin
  • Macro/CryptoPP530Fips32.dll
    .dll windows:4 windows x86 arch:x86

    Password: 4545

    d6c38e965367a686e74b0b12a0cf6e1e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Macro/Welcome.html
    .html
  • Macro/norecoil/COPYRIGHT
  • Macro/norecoil/LICENSE
  • Macro/norecoil/README.txt
  • Macro/norecoil/THIRDPARTYLICENSEREADME-JAVAFX.txt
  • Macro/norecoil/THIRDPARTYLICENSEREADME.txt
  • Macro/norecoil/f_00001a
  • Macro/norecoil/f_00001b
  • Macro/norecoil/f_00001c
  • Macro/release
  • Macro/v2/00007A.dat
  • Macro/v2/00007B.dat
  • Macro/v2/00007C.dat
  • Macro/v2/00007D.dat
  • Macro/v2/00007E.dat
  • Macro/v2/00008A.dat
  • Macro/v8/eax.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    Password: 4545

    10a283f307e6f4139afad8021396dc78


    Headers

    Imports

    Exports

    Sections

  • Resource/ahk/CefSharp.Core.Runtime.dll
    .dll windows:6 windows x86 arch:x86

    Password: 4545

    6dcc8c8ff6147ad4fff786bd7cecf6c3


    Headers

    Imports

    Exports

    Sections

  • Resource/ahk/CefSharp.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    Password: 4545

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/ahk/CefSharp.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    Password: 4545

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/ahk/CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    Password: 4545

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/ahk/CiCpFips32.dll
    .dll windows:4 windows x86 arch:x86

    Password: 4545

    bc1438c3e4144dc8db9b210e572fdde1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/ahk/CiWinCng32.dll
    .dll windows:5 windows x86 arch:x86

    Password: 4545

    1a5e0def5aa1145793eac6d20aaaa60b


    Headers

    Imports

    Exports

    Sections

  • Resource/ahk/CommandLine.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/ahk/CommonInternal.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/ahk/chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    091314120316d822fc9586bfb9c6265f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/ahk/concrt140.dll
    .dll windows:6 windows x86 arch:x86

    a8b026107d3b72f3a87bdc151f131871


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/0000/_DataPerfCounters_d.ini
  • Resource/bypassing/0000A1.dat
  • Resource/bypassing/0000A3.dat
  • Resource/bypassing/0000A4.dat
  • Resource/bypassing/0000A7.dat
  • Resource/bypassing/0000A8.dat
  • Resource/bypassing/0000A9.dat
  • Resource/bypassing/0000AA.dat
  • Resource/bypassing/0000AB.dat
  • Resource/bypassing/0000AC.dat
  • Resource/bypassing/0000AF.dat
  • Resource/bypassing/0000B0.dat
  • Resource/bypassing/0000B1.dat
  • Resource/bypassing/0000B9.dat
  • Resource/bypassing/0000BA.dat
  • Resource/bypassing/0002A0.dat
  • Resource/bypassing/0002A1.dat
  • Resource/bypassing/0002A2.dat
  • Resource/bypassing/0002A3.dat
  • Resource/bypassing/0002A5.dat
  • Resource/bypassing/0002A6.dat
  • Resource/bypassing/0002A7.dat
  • Resource/bypassing/0002A8.dat
  • Resource/bypassing/0002B0.dat
  • Resource/bypassing/0002B1.dat
  • Resource/bypassing/0002B3.dat
  • Resource/bypassing/0002B4.dat
  • Resource/bypassing/0002B6.dat
  • Resource/bypassing/0002B7.dat
  • Resource/bypassing/0002B8.dat
  • Resource/bypassing/0002B9.dat
  • Resource/bypassing/0002BA.dat
  • Resource/bypassing/000A21.dat
  • Resource/bypassing/000A22.dat
  • Resource/bypassing/000A23.dat
  • Resource/bypassing/000A24.dat
  • Resource/bypassing/000C02.dat
  • Resource/bypassing/000C04.dat
  • Resource/bypassing/000C05.dat
  • Resource/bypassing/000C06.dat
  • Resource/bypassing/000C08.dat
  • Resource/bypassing/000F12.dat
  • Resource/bypassing/000F19.dat
  • Resource/bypassing/000F1D.dat
  • Resource/bypassing/000F20.dat
  • Resource/bypassing/000F21.dat
  • Resource/bypassing/000F26.dat
  • Resource/bypassing/000F27.dat
  • Resource/bypassing/000F28.dat
  • Resource/bypassing/000F2B.dat
  • Resource/bypassing/000F35.dat
  • Resource/bypassing/000F36.dat
  • Resource/bypassing/0B8959B5-5594-4761-9432-78ED542BAF42.dll
    .dll windows:6 windows x86 arch:x86

    5ad7754b8b7d47a03384de11fde1fc14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/0E89EB0D-C63C-428B-B765-86D69AB356EF.dll
    .dll windows:6 windows x86 arch:x86

    283c39babc7b2811a54e8a89c47da2d7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/0F985EE0-D71D-4529-B21C-3E5B5692B64D.dll
    .dll windows:6 windows x86 arch:x86

    26001c658714cc718899efee782644bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/1B375B0D-1538-4B73-B592-2A73D7D4D8CB.dll
    .dll windows:6 windows x86 arch:x86

    de77eb968928502dec5275893f994024


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/2C3E685D-4A25-4268-B4D8-FB627E5EA8E4.dll
    .dll windows:6 windows x86 arch:x86

    283c39babc7b2811a54e8a89c47da2d7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/3ADDDBCD-0FB2-40DC-ACF3-EF02C2889B9C.dll
    .dll windows:6 windows x86 arch:x86

    95d3e8a862cd456918aaf8747b52f288


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/3C1ABAC1-E1C4-4298-A3F0-35B2B42BDA04.dll
    .dll windows:6 windows x86 arch:x86

    3971bac381a56bd3738fd00e4801ea2f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/4B13C8B1-F1FA-43B1-BD70-628A15F5BFD7.dll
    .dll windows:6 windows x86 arch:x86

    942f18ebabd9244ce13e762ba439765c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/4F7B0967-9B93-48D4-BC7B-B1C4180C383E.dll
    .dll windows:6 windows x86 arch:x86

    283c39babc7b2811a54e8a89c47da2d7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/4FE6D485-08A6-4C32-8484-2BD6A1451025.dll
    .dll windows:6 windows x86 arch:x86

    354c6f6383a35e4eab78d1025318fa6e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/5FEBC6FD-A56C-4E37-BDE1-35DD0ABAC1C8.dll
    .dll windows:6 windows x86 arch:x86

    f1e0db3f1d9740f05267f870d1715b98


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/5FFCCBCC-C049-4E8A-85B0-DE5FC5D20008.dll
    .dll windows:6 windows x86 arch:x86

    a3324b371ff15b60c25f0e97bff92c32


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/6CC98B1D-5CEE-4DDB-A256-E973B40FB5B8.dll
    .dll windows:6 windows x86 arch:x86

    283c39babc7b2811a54e8a89c47da2d7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/easyant/Microsoft.Diagnostics.FastSerialization.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/easyant/Microsoft.Diagnostics.Tracing.TraceEvent.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/easyant/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/lua/CefSharp.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/lua/CefSharp.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Settings/bcel.md
  • Settings/cldr.md
  • Version/plugins/FlowSshNetSamples/FlowSshNet_Exec.ps1
    .ps1
  • Version/plugins/FlowSshNetSamples/FlowSshNet_Sftp.ps1
    .ps1
  • Version/plugins/config/CiWinCng32.dll
    .dll windows:5 windows x86 arch:x86

    249f7f60bc5cc1e6cd4854c38f648aea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Version/plugins/config/conver/Countries.bin
  • Version/plugins/config/converter.ini
  • Version/themes/CefSharp.BrowserSubprocess.Core.dll
    .dll windows:6 windows x86 arch:x86

    fe973387dd4756a8883dd6836d89aa26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Version/themes/Revert.wmz
    .zip
  • Version/themes/cacert.pem
  • Version/themes/wabimp.dll
    .dll windows:10 windows x86 arch:x86

    18e335b02063fa318512c131b85e788b


    Headers

    Imports

    Exports

    Sections

  • Version/themes/wabmig.exe
    .exe windows:10 windows x86 arch:x86

    e728ea75abb234fc8a398ba12164a50e


    Headers

    Imports

    Sections

  • Version/v3/crashhandler.dll.old
    .dll windows:6 windows x86 arch:x86

    05c726fc1cf945d675bbf9861939ca4e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lnjector.exe
    .exe windows:6 windows x64 arch:x64

    77d846081944f156ca8714dda498fc8a


    Headers

    Imports

    Sections