General

  • Target

    Downloads.rar

  • Size

    30.2MB

  • MD5

    44830fc849be893481a341fab4ff45c4

  • SHA1

    09b82b727ecdb454310df8d4a037853f7bcf6721

  • SHA256

    eb1cf51ad63919a7b28b8e38658b826c5469a073e1048d4cfd103bd91a915fb5

  • SHA512

    e9d5aadaba6c1cd0a997e6da1770d03a1021bb680914284111690decfc3beec1d0a0becd4e210a073f53d6fca8493881491589faf567ec200976fc10d6d458c0

  • SSDEEP

    393216:yqKpIq/301CATS0Wui0jMcl5d1W9Dt974rZVx6INOxPjXYFD7gbPMrYzZDT+accq:ZXd1KDt9oV8INurX+cMeHcZ5r

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Downloads.rar
    .rar
  • BmkeLVE1.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • ReClass.NET.rar
    .rar
  • ReClass.NET_Launcher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • readme.txt
  • x64/ColorCode.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • x64/Microsoft.ExceptionMessageBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • x64/NativeCore.dll
    .dll windows:6 windows x64 arch:x64

    2663fa3d9ff5f199bf5e84aa180acaaa


    Headers

    Imports

    Exports

    Sections

  • x64/NativeCore.so
    .elf linux x64
  • x64/ReClass.NET.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • x64/SQLite.Interop.dll
    .dll windows:6 windows x64 arch:x64

    8b65b647278c90a91a98d2cac8dfa8b1


    Headers

    Imports

    Exports

    Sections

  • x64/System.Data.SQLite.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • x86/ColorCode.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • x86/Microsoft.ExceptionMessageBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • x86/NativeCore.dll
    .dll windows:6 windows x86 arch:x86

    8d695936ede28794ad79ad08a793cfa2


    Headers

    Imports

    Exports

    Sections

  • x86/NativeCore.so
    .elf linux x86
  • x86/ReClass.NET.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • x86/SQLite.Interop.dll
    .dll windows:6 windows x86 arch:x86

    4cb59043491b2ca536e3ce19189f4918


    Headers

    Imports

    Exports

    Sections

  • x86/System.Data.SQLite.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections