General

  • Target

    ForlornApi (1).zip

  • Size

    2.8MB

  • MD5

    5f9bb0c612f3d36663302b5f681aff16

  • SHA1

    8963bd013433d08750f8b5171ec05835ac174eb5

  • SHA256

    164cdf42d997104c724feceaca5e3217e69561997f67e1846b2e3f87afea6e67

  • SHA512

    9240ea73cf2914a7a3c1c0b1f3da7243d5e411f5023cd83980b217504c263c2a5943501a8431afc92d0513e08c5dd6e7269ca469bedd895c292191ca6482cc83

  • SSDEEP

    49152:kCeOBqa7TJ4Q6KL/ojzjFptkzTyFjfJPxYQFpPrMcC9RxTK0q2n3yBT2zYKYsemv:RYaS6kRptkHyNRPxjrMcC9RxThZ0Pmt1

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • ForlornApi (1).zip
    .zip
  • ForlornApi/ForlornApi.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • ForlornApi/bin/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    ac435dfa812fddee99bbf7a986186d1d


    Headers

    Imports

    Exports

    Sections

  • ForlornApi/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • ForlornApi/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • ForlornApi/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • ForlornApi/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections