General

  • Target

    RebelCracked.zip

  • Size

    68.5MB

  • MD5

    14e8b3c8011d938a78f377b32ba6cf1f

  • SHA1

    0f388959e196d4738bdc01233cd4025d0c50c8b3

  • SHA256

    6fcdfc6295a179fbbb3be25ed72ab9ed1f2338d3b7a97be6d76c95c046f00918

  • SHA512

    e6e55e0e0ed74999d5f3e82224d0545e1e07e184ae07fc7568f382d9c3bd02deed321ce7a7f4c7c5496bc7a09274e62e6e382e3596e466b85b6c250444f25c8d

  • SSDEEP

    1572864:OlPn22gjHAcq1qbL9ND6OmRP9wMwNsdMjDTy9J08DyJQRVGQa5:2gjHAc6qf/mMNKMjDOfXA8GQa5

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • RebelCracked.zip
    .zip
  • Rebel/Bin/Injector.exe
    .exe windows:6 windows x64 arch:x64

    076acaa656f74379ef1e60670f0fed54


    Headers

    Imports

    Exports

    Sections

  • Rebel/Bin/Rebel.dll
    .dll windows:6 windows x64 arch:x64

    5dbd05d0457a91e7c32b011f85e7842c


    Headers

    Imports

    Exports

    Sections

  • Rebel/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Rebel/FastColoredTextBox.xml
    .xml
  • Rebel/ReadMe.txt
  • Rebel/RebelCracked.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Rebel/System.CodeDom.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Rebel/System.CodeDom.xml