General

  • Target

    86019dfa4b16d3187a34b57d2e39478c.bin

  • Size

    731KB

  • MD5

    6cafef7735bb572d2a17533febf90cb4

  • SHA1

    52ea5e790b2773beb295396f0b268b683991bb1b

  • SHA256

    40ded0add671fb53226de26b74156274d1f0369fc2d6c06e1e234023e638f31d

  • SHA512

    8e332c5fba736a29571aa40ebb50964e21f1b386cc483a8879b2368fb8da9d925fe71e757f440ed272d6e70d956689ae7d4afe268609555415ba58d4bdb11b8e

  • SSDEEP

    12288:sgRa4wYPe+DtKCVz4oTw2HhrWjDH22nLxEgYwwGYvFlaIOx5licdGBMGNc:sgRa4wYPDljwMraDW+LXYvFtOEiGK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 86019dfa4b16d3187a34b57d2e39478c.bin
    .zip

    Password: infected

  • 0501e34876723e329a69e2571bccf64326ce615ebf7533b1eca2ad23a3c09555.rar
    .rar

    Password: infected

  • Cyber Ghost VPN + Key master.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • README.txt
  • dmview.ocx
    .dll regsvr32 windows:6 windows x64 arch:x64

    Password: infected

    cade1bb83eee406153899628af9ee28a


    Headers

    Imports

    Exports

    Sections

  • dnscmmc.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    Password: infected

    3922b90b5a2eecbfa5765ccf4dbe450f


    Headers

    Imports

    Exports

    Sections

  • elshyph.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    b6b3ace989c6db7ab2cafc69ea32ef86


    Headers

    Imports

    Exports

    Sections