General

  • Target

    Release.zip

  • Size

    11.7MB

  • MD5

    8d1d672eb0ac907c4d27b84b6c864e11

  • SHA1

    0b5c90ce4167d55882293d8aa181bc5ed86d2e07

  • SHA256

    f6217a933da7d5243d3879c6d54cb278db895fba5bd787670494a6ce6d8db598

  • SHA512

    c636f49a61f18aea1a2f8aacea36552c3bae07fe884cfb4a921dd1681ec615567fc290a7c5b7efa3695c17b68988ee311758ed1e605b9748fd041f8e3f2023f1

  • SSDEEP

    196608:RCr9NtV0jv29S1NXCdImXFdPZmg8H4F8iwPFe4RsddP5gMsowbh6Hes5mBqBWqC9:RCTtV0QS1ZCXXFZEmk7R9MsoutCmwC1v

Score
7/10

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Release.zip
    .zip
  • Release/CefSharp.BrowserSubprocess.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • Release/ServiceHub.OpenHS.x64.exe
    .exe windows:6 windows x64 arch:x64

    1076db4c5ff3d2e7ac72cbcf0b545d76


    Headers

    Imports

    Sections

  • Release/dsclhk.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • Release/filecheck.txt
  • Release/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Release/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections