General

  • Target

    encrypt0r-windows-x86.zip

  • Size

    99.1MB

  • MD5

    3ff7e521d4f8002c41cfc4f9092567ce

  • SHA1

    a7a7e8c74d91c6d7e5a353edd64ecf0ce93582e7

  • SHA256

    44bca4179b6df0da2e9c9612839c033654bb53107166cdca884c3a0649a036b5

  • SHA512

    058ac415b95fb57c6d193ab83e480bf11850a92033b32e4c47653a945992d91cc876e0ec13feaf086bc4fbbca772a0a0d1e86f309b0245a291263fa60bacdb7b

  • SSDEEP

    3145728:jHikQYxWxeAqtqhhH7M1gqMi5uvEiQc3QOXUIpBOp:jHI/hqMah9OBfk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • encrypt0r-windows-x86.zip
    .zip

    Password: infected

  • release-builds/encrypt0r-win32-ia32/LICENSE
  • release-builds/encrypt0r-win32-ia32/LICENSES.chromium.html
  • release-builds/encrypt0r-win32-ia32/chrome_100_percent.pak
  • release-builds/encrypt0r-win32-ia32/chrome_200_percent.pak
  • release-builds/encrypt0r-win32-ia32/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    Password: infected

    7f269ea2d96d8d376f2c7642ddadc7bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • release-builds/encrypt0r-win32-ia32/encrypt0r.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    d01f00368ae143a2c2bf4039e293d72b


    Headers

    Imports

    Exports

    Sections

  • release-builds/encrypt0r-win32-ia32/ffmpeg.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    c7497313062f9c96c83518b36f70731f


    Headers

    Imports

    Exports

    Sections

  • release-builds/encrypt0r-win32-ia32/icudtl.dat
  • release-builds/encrypt0r-win32-ia32/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    14cd5ffd5d2a5e20eb8ffa21377b813a


    Headers

    Imports

    Exports

    Sections

  • release-builds/encrypt0r-win32-ia32/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    9c4c04195a583fb756682a21cfcd595b


    Headers

    Imports

    Exports

    Sections

  • release-builds/encrypt0r-win32-ia32/locales/af.pak
  • release-builds/encrypt0r-win32-ia32/locales/am.pak
  • release-builds/encrypt0r-win32-ia32/locales/ar.pak
  • release-builds/encrypt0r-win32-ia32/locales/bg.pak
  • release-builds/encrypt0r-win32-ia32/locales/bn.pak
  • release-builds/encrypt0r-win32-ia32/locales/ca.pak
  • release-builds/encrypt0r-win32-ia32/locales/cs.pak
  • release-builds/encrypt0r-win32-ia32/locales/da.pak
  • release-builds/encrypt0r-win32-ia32/locales/de.pak
  • release-builds/encrypt0r-win32-ia32/locales/el.pak
  • release-builds/encrypt0r-win32-ia32/locales/en-GB.pak
  • release-builds/encrypt0r-win32-ia32/locales/en-US.pak
  • release-builds/encrypt0r-win32-ia32/locales/es-419.pak
  • release-builds/encrypt0r-win32-ia32/locales/es.pak
  • release-builds/encrypt0r-win32-ia32/locales/et.pak
  • release-builds/encrypt0r-win32-ia32/locales/fa.pak
  • release-builds/encrypt0r-win32-ia32/locales/fi.pak
  • release-builds/encrypt0r-win32-ia32/locales/fil.pak
  • release-builds/encrypt0r-win32-ia32/locales/fr.pak
  • release-builds/encrypt0r-win32-ia32/locales/gu.pak
  • release-builds/encrypt0r-win32-ia32/locales/he.pak
  • release-builds/encrypt0r-win32-ia32/locales/hi.pak
  • release-builds/encrypt0r-win32-ia32/locales/hr.pak
  • release-builds/encrypt0r-win32-ia32/locales/hu.pak
  • release-builds/encrypt0r-win32-ia32/locales/id.pak
  • release-builds/encrypt0r-win32-ia32/locales/it.pak
  • release-builds/encrypt0r-win32-ia32/locales/ja.pak
  • release-builds/encrypt0r-win32-ia32/locales/kn.pak
  • release-builds/encrypt0r-win32-ia32/locales/ko.pak
  • release-builds/encrypt0r-win32-ia32/locales/lt.pak
  • release-builds/encrypt0r-win32-ia32/locales/lv.pak
  • release-builds/encrypt0r-win32-ia32/locales/ml.pak
  • release-builds/encrypt0r-win32-ia32/locales/mr.pak
  • release-builds/encrypt0r-win32-ia32/locales/ms.pak
  • release-builds/encrypt0r-win32-ia32/locales/nb.pak
  • release-builds/encrypt0r-win32-ia32/locales/nl.pak
  • release-builds/encrypt0r-win32-ia32/locales/pl.pak
  • release-builds/encrypt0r-win32-ia32/locales/pt-BR.pak
  • release-builds/encrypt0r-win32-ia32/locales/pt-PT.pak
  • release-builds/encrypt0r-win32-ia32/locales/ro.pak
  • release-builds/encrypt0r-win32-ia32/locales/ru.pak
  • release-builds/encrypt0r-win32-ia32/locales/sk.pak
  • release-builds/encrypt0r-win32-ia32/locales/sl.pak
  • release-builds/encrypt0r-win32-ia32/locales/sr.pak
  • release-builds/encrypt0r-win32-ia32/locales/sv.pak
  • release-builds/encrypt0r-win32-ia32/locales/sw.pak
  • release-builds/encrypt0r-win32-ia32/locales/ta.pak
  • release-builds/encrypt0r-win32-ia32/locales/te.pak
  • release-builds/encrypt0r-win32-ia32/locales/th.pak
  • release-builds/encrypt0r-win32-ia32/locales/tr.pak
  • release-builds/encrypt0r-win32-ia32/locales/uk.pak
  • release-builds/encrypt0r-win32-ia32/locales/ur.pak
  • release-builds/encrypt0r-win32-ia32/locales/vi.pak
  • release-builds/encrypt0r-win32-ia32/locales/zh-CN.pak
  • release-builds/encrypt0r-win32-ia32/locales/zh-TW.pak
  • release-builds/encrypt0r-win32-ia32/resources.pak
  • release-builds/encrypt0r-win32-ia32/resources/app.asar
  • release-builds/encrypt0r-win32-ia32/snapshot_blob.bin
  • release-builds/encrypt0r-win32-ia32/v8_context_snapshot.bin
  • release-builds/encrypt0r-win32-ia32/version
  • release-builds/encrypt0r-win32-ia32/vk_swiftshader.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    b6ebccdd6147b2522f8349f23510dede


    Headers

    Imports

    Exports

    Sections

  • release-builds/encrypt0r-win32-ia32/vk_swiftshader_icd.json
  • release-builds/encrypt0r-win32-ia32/vulkan-1.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    0c3e803dd8e326c1278d7872e609b579


    Headers

    Imports

    Exports

    Sections