Resubmissions

25-08-2024 14:11

240825-rhfkpsybnb 10

25-08-2024 14:06

240825-ret9pazcpr 10

General

  • Target

    SeroXen-main.zip

  • Size

    14.7MB

  • MD5

    0a682639d15acff9fa26d868b718a70e

  • SHA1

    a87722f3d2454383bb53d63845290d065551104a

  • SHA256

    424691c17ca850f4b9d390a795b5c416f3df3c37f223c90fcc8544344ae86b5d

  • SHA512

    479163fde3bc8fe972cda20f4b0d092c51cc511ee9b3f614f62c8a87cbc21e2d6dd71e0fe62d3932122e1706fe528bc52689ad81b5bbf270afa70164f55917d9

  • SSDEEP

    393216:ob5vzXcRjp+Chy8a8ZUvNKz5QMBYkdDBV4Xfdaup6E94D:ob1rm4Chy8avvwvBJBveQup6E9e

Score
10/10

Malware Config

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Obfuscated with Agile.Net obfuscator 2 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SeroXen-main.zip
    .zip
  • SeroXen-main/README.md
  • SeroXen-main/README.txt
  • SeroXen-main/SeroXen Documentation and TOS.pdf
    .pdf
  • SeroXen-main/SeroXen.exe
    .exe windows:4 windows x64 arch:x64

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SeroXen-main/bin/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Cake.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Cake.Powershell.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Gma.System.MouseKeyHook.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Logic.NET.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • SeroXen-main/bin/Microsoft.VisualStudio.CodeCoverage.Shim.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Microsoft.VisualStudio.TestPlatform.MSTest.TestAdapter.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.Interface.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Microsoft.VisualStudio.TestPlatform.TestFramework.Extensions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Microsoft.VisualStudio.TestPlatform.TestFramework.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Mono.Cecil.Mdb.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Mono.Cecil.Pdb.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Mono.Cecil.Rocks.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Mono.Cecil.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Open.Nat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Profiles/Default.xml
  • SeroXen-main/bin/Quasar.Common.Tests.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/Quasar.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/hwidreset_sdk/SeroXen HWID Reset.exe
    .exe windows:4 windows x64 arch:x64

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • SeroXen-main/bin/protobuf-net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections