Resubmissions

25/08/2024, 12:30

240825-ppldeswbpn 7

25/08/2024, 12:27

240825-pmvjbawaqk 7

25/08/2024, 12:18

240825-pgvl5atepa 7

General

  • Target

    XYZ_nova_unbanned.zip

  • Size

    87KB

  • MD5

    f5cba228cac0617425611c9ca5b25472

  • SHA1

    e9b52aa3daa12b6118ecf4c81736355d3379c6fc

  • SHA256

    1cf987040a2f3adecd5523a087834c588712f511db21d94f8a73fa4928375662

  • SHA512

    38c930b69983bc6bae30058fbb0d3820e61097cad02a232cfa9c2309c1630ee3a8f5b7c3ea27b5c508fa4926bc25742e1aec0cffe9ddebcf9602a0ea8b0effc5

  • SSDEEP

    1536:IeEiLwrjH1yXNrFj4Tkp86tn3WE8ju8/dcEJVKxrKO1np7WHdS:GjVyXNr+TkaaWEe3FBJ4x+iS0

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • XYZ_nova_unbanned.zip
    .zip
  • Colorful.Console.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections