Overview

overview

3

Static

static

3

DisprrtExecutor.rar

windows7-x64

3

DisprrtExecutor.rar

windows10-2004-x64

3

DisprrtExe...or.exe

windows7-x64

1

DisprrtExe...or.exe

windows10-2004-x64

1

DisprrtExe...ox.dll

windows7-x64

1

DisprrtExe...ox.dll

windows10-2004-x64

1

DisprrtExe...pi.dll

windows7-x64

1

DisprrtExe...pi.dll

windows10-2004-x64

1

DisprrtExe...ct.dll

windows7-x64

1

DisprrtExe...ct.dll

windows10-2004-x64

1

DisprrtExe...64.dll

windows7-x64

1

DisprrtExe...64.dll

windows10-2004-x64

1

DisprrtExe...64.dll

windows7-x64

1

DisprrtExe...64.dll

windows10-2004-x64

1

DisprrtExe...sh.dll

windows7-x64

1

DisprrtExe...sh.dll

windows10-2004-x64

1

DisprrtExe...td.dll

windows7-x64

1

DisprrtExe...td.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    DisprrtExecutor.rar

  • Size

    2.6MB

  • MD5

    52541fd81f35492941801d0759d62af7

  • SHA1

    038995ea83c0260ccb7f83e185eeda1f3f902e0b

  • SHA256

    f2c0146bbcc7af3c97140c6a8f57423b257495748e0b204614e53937f0087953

  • SHA512

    bc7852535a6d76482108e69673addd5541433fbdfec8ec5f1788ba9be4a78f90dde15fb8989a2114b200c3a43fc158ffcc630e228fe1b5da354b559e4e86a2de

  • SSDEEP

    49152:F8Z5bRWa0UmMncLKHB+EQMZCj0LGaIVuUJcVQzX5OLc8Kcu99RdNaz1KY3yc:ydzncLKHPZCXV1RzpOLc+q3Mdf

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • DisprrtExecutor.rar
    .rar
  • DisprrtExecutor/DisprrtExecutor.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • DisprrtExecutor/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • DisprrtExecutor/ForlornApi.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • DisprrtExecutor/bin/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    dc5ffe84bd3b4405ea83f693b055c515


    Headers

    Imports

    Exports

    Sections

  • DisprrtExecutor/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • DisprrtExecutor/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • DisprrtExecutor/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • DisprrtExecutor/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • DisprrtExecutor/workspace/.tests/appendfile.txt
  • DisprrtExecutor/workspace/.tests/getcustomasset.txt
  • DisprrtExecutor/workspace/.tests/isfile.txt
  • DisprrtExecutor/workspace/.tests/listfiles/test_1.txt
  • DisprrtExecutor/workspace/.tests/listfiles/test_2.txt
  • DisprrtExecutor/workspace/.tests/loadfile.txt
  • DisprrtExecutor/workspace/.tests/readfile.txt
  • DisprrtExecutor/workspace/.tests/writefile
  • DisprrtExecutor/workspace/.tests/writefile.txt
  • DisprrtExecutor/workspace/4483381587.txt
  • DisprrtExecutor/workspace/621129760.txt
  • DisprrtExecutor/workspace/DomainX Version.txt
  • DisprrtExecutor/workspace/FFJHub_Key.txt
  • DisprrtExecutor/workspace/IY_FE.iy