Resubmissions

05/09/2024, 14:34

240905-rxvyyasfqj 8

05/09/2024, 14:33

240905-rxbkastdma 9

General

  • Target

    Calibri.rar

  • Size

    8.9MB

  • MD5

    e1c8ed2653b6debe0b5662d492aa8901

  • SHA1

    f8bfe524fa2d907e3f87f5f95d6cd1790395d86e

  • SHA256

    5d6f5db08369aa13b26264d83f95b0aab53168bcc4e296fd2edd1b9ace9a7511

  • SHA512

    2b738c06129178b00d39bb53969b1db9705ecb2a5697cea3f492874895f1b8fef110733dc69b3bacaa188a97944e6a7d9a79766165d36793203021c6221d643a

  • SSDEEP

    196608:TQSpKy8COV9ufw2JWDTH7Y4d7X7FpdvQNqRLcxrBFNwyKiCpHtb1kLcPLwIT:jUrCS9umDP/rvIjBFNWjLvPEIT

Score
7/10

Malware Config

Signatures

  • Themida packer 3 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Calibri.rar
    .rar
  • Calibri/Bin/Calibri.dll
    .dll windows:6 windows x64 arch:x64

    5f44be4cd1ad5dd76b548e88e0f96ddc


    Headers

    Imports

    Sections

  • Calibri/Bin/CalibriAuth.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Calibri/Bin/Tabs/Tab_#1_
  • Calibri/Bin/Tabs/Tab_#1__
  • Calibri/Bin/Tabs/Tab_#2
    .js
  • Calibri/Bin/Tabs/Tab_#3
    .js
  • Calibri/Bin/Tabs/Tab_#4
  • Calibri/Bin/injector.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • Calibri/Bin/rconsole.runtimeconfig.json
  • Calibri/Bin/sdfds.deps.json
  • Calibri/Bin/sdfds.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Calibri/Bin/sdfds.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Calibri/Bin/sdfds.runtimeconfig.json
  • Calibri/Bin/syntax.xshd
  • Calibri/Bin/version.bin
  • Calibri/Calibri.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Calibri/ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections