Resubmissions

19-09-2024 05:12

240919-fvzcsssdpa 6

19-09-2024 05:02

240919-fpjedssbnd 6

General

  • Target

    net8.0-windows.rar

  • Size

    7.9MB

  • MD5

    47af08e8eeda1e7f971fe6deb7eb7a82

  • SHA1

    b38b8723db4571a900244306306bfe15d4794111

  • SHA256

    7e4163a4231f2489dfd347f542fbafd7a30a5cd13b728801d43691c1283137e5

  • SHA512

    4cce6f6d063f6407ee15fbd3bdf98ac1309dd0baccbafa2068792f2d9ca5c4c990a38acacdf2118d27a49bd23b0e956d2f592da9ef865fe7cb21bba48c2e8d77

  • SSDEEP

    196608:nqf1IyEH6vmvrrKj3t7OZyMx3q6VujaOmCfchkl9OmWp:qtho6zrtepqabOchy9OmWp

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • net8.0-windows.rar
    .rar
  • net8.0-windows/Lettuce.dll
    .dll windows:6 windows x64 arch:x64

    a678ff7e24b7b5dc796fb746760d63d6


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/Lettuce.exp
  • net8.0-windows/Lettuce.lib
  • net8.0-windows/Lettuce.pdb
  • net8.0-windows/LettuceUI.deps.json
  • net8.0-windows/LettuceUI.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • net8.0-windows/LettuceUI.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • net8.0-windows/LettuceUI.pdb
  • net8.0-windows/LettuceUI.runtimeconfig.json
  • net8.0-windows/Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • net8.0-windows/Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • net8.0-windows/Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • net8.0-windows/bin/Monaco/index.html
    .js
  • net8.0-windows/bin/Monaco/vs/base/worker/workerMain.js
    .js
  • net8.0-windows/bin/Monaco/vs/base/worker/workerMain.js.map
  • net8.0-windows/bin/Monaco/vs/basic-languages/lua/lua.js
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.css
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.js
    .js
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.js.map
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.de.js
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.de.js.map
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.es.js
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.es.js.map
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.fr.js
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.fr.js.map
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.it.js
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.it.js.map
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.ja.js
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.ja.js.map
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.js
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.js.map
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.ko.js
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.ko.js.map
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.ru.js
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.ru.js.map
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js.map
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • net8.0-windows/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js.map
  • net8.0-windows/bin/Monaco/vs/loader.js
    .js
  • net8.0-windows/bin/Monaco/vs/loader.js.map
    .js
  • net8.0-windows/bin/editor.lua
    .js
  • net8.0-windows/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-arm64/native/WebView2Loader.dll
  • net8.0-windows/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/scripts/Better Unc Check.lua
    .js
  • net8.0-windows/scripts/Dex.lua
    .js
  • net8.0-windows/scripts/IYR.lua
  • net8.0-windows/scripts/Infinite Yield.lua
    .js
  • net8.0-windows/scripts/Sine Wave.lua
  • net8.0-windows/scripts/Spinning Donut.lua
  • net8.0-windows/scripts/UNCCheckEnv.lua
    .js
  • net8.0-windows/scripts/avatr.lua
  • net8.0-windows/scripts/hitbox.lua
  • net8.0-windows/workspace/.tests/appendfile.txt
  • net8.0-windows/workspace/.tests/getcustomasset.txt
  • net8.0-windows/workspace/.tests/isfile.txt
  • net8.0-windows/workspace/.tests/listfiles/test_1.txt
  • net8.0-windows/workspace/.tests/listfiles/test_2.txt
  • net8.0-windows/workspace/.tests/readfile.txt
  • net8.0-windows/workspace/.tests/writefile
  • net8.0-windows/workspace/.tests/writefile.txt
  • net8.0-windows/workspace/4483381587.txt
  • net8.0-windows/workspace/IY_FE.iy
  • net8.0-windows/workspace/SNC-Results.txt
  • net8.0-windows/workspace/dex/deps_version.dat
  • net8.0-windows/workspace/dex/rbx_api.dat
  • net8.0-windows/workspace/dex/rbx_rmd.dat
  • net8.0-windows/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • net8.0-windows/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections