Overview

overview

7

Static

static

3

WitchABy.dll

windows7-x64

4

WitchABy.dll

windows10-2004-x64

1

notely-setup-x64.msi

windows7-x64

7

notely-setup-x64.msi

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Dropper.installer.msi.malz.7z

  • Size

    302KB

  • MD5

    8b224056331ff45c2469d54a795fb946

  • SHA1

    2f151c53d25a34cf53dc62e22ffa02d7ce4bf7ea

  • SHA256

    321b9aa26c7470078e865450a9494746c49b8d1c6363ba9225077587dd7682f4

  • SHA512

    f3037161c816dc2beef3755e0bc01b6b8d7984f1bcef50251c51740d81bde3b8fc2a76981316169d7a2fe46a5b8b9be8d3af341855ec574680da73ffeb7fce81

  • SSDEEP

    6144:AjcHkIMnVpkwX9nfXCzBNvhochQv3SQUI3mLg180ttaRAi8IGbGvtxbh:AjcHZ8VCw9fXyBNvh72vSQUsmLp0ttab

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Dropper.installer.msi.malz.7z
    .7z

    Password: infected

  • WitchABy.jpg
    .dll windows:4 windows x64 arch:x64

    Password: infected

    9b47d62d27a14f782edc868c8da47bcc


    Headers

    Imports

    Exports

    Sections

  • notely-setup-x64.msi
    .msi