Static

static

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Loader.zip

  • Size

    9.0MB

  • MD5

    cb7084f909eaafc5e3c652883da9641e

  • SHA1

    204730a9fb536b4c18288a8bba2955fb1839aba7

  • SHA256

    90ea382861a74d9c66c7b9248bd7376b612fb3bb72fd5fec6c25d1a74a5c46af

  • SHA512

    0e7b190bb8df1615cf9f78fb1fa479efda020f5bec637bdaf76331c9aef7756740d0628a10a3a6608537c77f7a9fd2ce7d2ffea347feec50202f57dad15dd7dc

  • SSDEEP

    196608:+Vl32cFCClBO5smLGbCtv69hukmSkApUVbHc8Kvs:+VV2Y2GmLGbCtv8bYbHdKE

Score
7/10
themida

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Loader.zip
    .zip
  • Loader/HWID-Checker.cmd
  • Loader/Loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Loader/Monitor Spoof/CRU.exe
    .exe windows:4 windows x86 arch:x86

    cafc89e1b0a9b2c5b10389d6d19936ce


    Headers

    Imports

    Exports

    Sections

  • Loader/Monitor Spoof/reset-all.exe
    .exe windows:5 windows x86 arch:x86

    32f33abb2edf5d9be4310f0050d459d0


    Headers

    Imports

    Sections

  • Loader/Monitor Spoof/restart.exe
    .exe windows:5 windows x86 arch:x86

    cf4f510acda53bad738cb1d4e01b1c70


    Headers

    Imports

    Sections

  • Loader/Monitor Spoof/restart64.exe
    .exe windows:5 windows x64 arch:x64

    2a69fe822ced9bf301916c1307e497a9


    Headers

    Imports

    Sections

  • Loader/Trace removers (only if you dont reinstall, this may get you delay banned)/applecleaner_2.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • Loader/Trace removers (only if you dont reinstall, this may get you delay banned)/bitcheats_cleaner.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections