General

  • Target

    Archive.zip

  • Size

    57.8MB

  • MD5

    e670b5f4b34c04983fa9d3177e78e71c

  • SHA1

    1e6edb884fe9355e601bfbbb13eae43e042cf5fe

  • SHA256

    52f73f40c1b02084661e463dcd098f6d2ebe50e37691bd33bb0d2d015baf2ca0

  • SHA512

    e2019de8d8c9b2131cf0ebccd4c32cbd6ecdd1de830e92ac516f91ae237a52ac04419091291a50cb08cfed72283e03988be0d4a82866f633092393f6ecf2b3d0

  • SSDEEP

    1572864:IjSfSmDCTre9yXJ58dI00XDWdpLzeee0R0PnuPA36:IASmernJ5qoaTXBiSZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • Archive.zip
    .zip
  • Loader.rar
    .rar
  • Loader/Monitor Spoof/CRU.exe
    .exe windows:4 windows x86 arch:x86

    cafc89e1b0a9b2c5b10389d6d19936ce


    Headers

    Imports

    Exports

    Sections

  • Loader/Monitor Spoof/reset-all.exe
    .exe windows:5 windows x86 arch:x86

    32f33abb2edf5d9be4310f0050d459d0


    Headers

    Imports

    Sections

  • Loader/Monitor Spoof/restart.exe
    .exe windows:5 windows x86 arch:x86

    cf4f510acda53bad738cb1d4e01b1c70


    Headers

    Imports

    Sections

  • Loader/Monitor Spoof/restart64.exe
    .exe windows:5 windows x64 arch:x64

    2a69fe822ced9bf301916c1307e497a9


    Headers

    Imports

    Sections

  • Loader/RUN ME ALSO.exe
    .exe windows:5 windows x86 arch:x86

    1494de9b53e05fc1f40cb92afbdd6ce4


    Code Sign

    Headers

    Imports

    Sections

  • Loader/RUN ME FIRST.exe
    .exe windows:5 windows x86 arch:x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • Loader/SafeGuard-Lib.dll
    .dll windows:6 windows x64 arch:x64

    344cab9e57b5c9f5e3c40e058e7ec941


    Headers

    Imports

    Exports

    Sections

  • Loader/SecureEngineSDK64.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Exports

    Sections

  • Loader/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    8571205d611243f448ca93f8273cd505


    Headers

    Imports

    Exports

    Sections

  • Loader/spoofer.exe
    .exe windows:6 windows x64 arch:x64

    5545c5386ec5b03c1045bc9564266568


    Headers

    Imports

    Exports

    Sections

  • Loader/zlib1.dll
    .dll windows:6 windows x64 arch:x64

    3e00cc5294fc2fcbabd14c323443ba4e


    Headers

    Imports

    Exports

    Sections

  • VMPDump.zip
    .zip
  • VMPDump.exe
    .exe windows:6 windows x64 arch:x64

    048cdc0078eb5af6e8701f1f001503ca


    Headers

    Imports

    Sections