Overview

overview

3

Static

static

3

sample.tar

windows7-x64

3

sample.tar

windows10-2004-x64

3

f2.exe

windows7-x64

3

f2.exe

windows10-2004-x64

3

scripts/co...2.bash

ubuntu-18.04-amd64

1

scripts/co...2.bash

debian-9-armhf

1

scripts/co...2.bash

debian-9-mips

1

scripts/co...2.bash

debian-9-mipsel

1

scripts/co...f2.ps1

windows7-x64

3

scripts/co...f2.ps1

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f2_1.9.1_windows_386.tar.gz

  • Size

    3.3MB

  • MD5

    1f3200785a288cee03b7fff71427142e

  • SHA1

    000d46b5728dcdbe2cbda0239a36dfd8f4773676

  • SHA256

    92bc9b00d88356c26b947b9a75b87bdb751385665c606e70ce31c49459612fb1

  • SHA512

    b97f2d34d01bbbfdf9e509bdf02b16f3732625c6114aff54aaf5623b2da694efa31e836098d6aa97073acf8fd4a73a126bf9d0006188a4d3648cb0f9ea83fef3

  • SSDEEP

    49152:FWe/Yhlyjc3P0TYLGSFbq3s/S9lQEF5SJXF2yKNbZtRF7mLi1I5C03QVeT:FW9P45SFbqMS9lQEF5SJ3obrHkiwgeT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f2_1.9.1_windows_386.tar.gz
    .gz

    Password: infected

  • sample
    .tar .ps1 polyglot

    Password: infected

  • CHANGELOG.md
  • LICENCE
  • README.md
  • f2.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections

  • scripts/completions/f2.bash
    .sh linux
  • scripts/completions/f2.fish
  • scripts/completions/f2.zsh
    .ps1