Overview

overview

10

Static

static

3

Bulid/DefByPass.bat

windows10-1703-x64

Bulid/DefByPass.bat

windows11-21h2-x64

8

Bulid/WinEnergy.exe

windows10-1703-x64

Bulid/WinEnergy.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    Bulid.rar

  • Size

    178KB

  • MD5

    bbc154b4698d429874a88fbe0149ec14

  • SHA1

    972fcbffbcff10ec9a817e6761bc429bdce678fa

  • SHA256

    558fe2e8a6965bcdc1e2b4494c7a25458fe4981bfcbf7130de20466b72855561

  • SHA512

    6a81587cf020aba8964fbe293955b5cbcdce2299cae8dab44baa6af8daba07efee764ff16a625b6866d5b77790c053da1566dbe7f5966f20f48c09920a77ef0a

  • SSDEEP

    3072:lx2zr7ouFf/GDmfFGVT/uiuXt3/PXvSU5LBzBnKAWP+vSjAD9PMJW1VwmozF:lozr0uFnGoFkuXt3/vvSY1J+PRY9r1OB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Bulid.rar
    .rar

    Password: x

  • Bulid/DefByPass.bat
    .bat .vbs
  • Bulid/WinEnergy.exe
    .exe windows:4 windows x86 arch:x86

    Password: x

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections