General

  • Target

    Slinkware (1).zip

  • Size

    707KB

  • MD5

    a7f52c2376d57168eb24187c47bcb14b

  • SHA1

    6058f37c86e89045493aec1527e90bbb4292d5ad

  • SHA256

    4232bf8bb54d12a73c0eb9cd0dca3037b25b3ca961f1f99ebf8ad79eb90599b3

  • SHA512

    2030df2a83078d5f3b38895c80eb10686c6ca7adee304241e7f5708fb58878789c041f0f2fefb68d65b02872a3943ebbdd6ee9dd60b73b1211eb5808c374797a

  • SSDEEP

    12288:gBCcmZ3449B/V6F5cDlHqLpQw/+hI8WTpRYSTJIj+OQv8fMXG:g8cmhplKNQwWZW0SdI1tfP

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Slinkware (1).zip
    .zip
  • slinkware/Butterfly.toml
  • slinkware/Paper.pdf
    .pdf
    • https://cloudcheats.net

  • slinkware/Slinkware.exe
    .exe windows:6 windows x64 arch:x64

    2ace000a075a1b6f8910a58ec1801d35


    Headers

    Imports

    Sections

  • slinkware/Slinkware.toml