General

  • Target

    Beta.rar

  • Size

    8.4MB

  • MD5

    9047b62a613454fac80ca05bb5e9e1d1

  • SHA1

    32133fb6bd87bf392029cc3b80995faf607bb966

  • SHA256

    38172ccc5f5911afc0b09d0e3d96ed2688be0253a51bf79e65d7b26b0f942e8e

  • SHA512

    c4edfb9668562e6fc50f8756a6ab6052ce60eee034a48d4368c7e76128c13f6f11d0a8899c022474932a7ddb64b28d724e8264cfff6f3856a64a5ab9d501b499

  • SSDEEP

    196608:EsGHcArQ6mnHAREn86pmCUVnf79Ob+tfPqZ1ZC62hyEFd:ErY6mnHFqCAnT9O3ZC6IFd

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Beta.rar
    .rar
  • Beta/RoHook.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Beta/RoHook.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Beta/RoHook.runtimeconfig.json
  • Beta/bin/Luau.dll
    .dll windows:6 windows x64 arch:x64

    baa93d47220682c04d92f7797d9224ce


    Headers

    Imports

    Exports

    Sections

  • Beta/bin/Luau.exp
  • Beta/bin/Luau.lib
  • Beta/bin/Luau.pdb
  • Beta/bin/Tab1.lua
  • Beta/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Beta/bin/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    9eadbf5148e153214fcf42eacb707d29


    Headers

    Imports

    Exports

    Sections

  • Beta/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • Beta/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Beta/bin/zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections

  • Beta/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections