General

  • Target

    Update.rar

  • Size

    49.5MB

  • MD5

    d146346c6b36e6451aba979bd9666a16

  • SHA1

    c6f72ce3b928d2af65555506c6364de018243a23

  • SHA256

    0c5b76338793c589eb8d1fbd68a770ae2bd79c8921f60aabfe7540f099be27f8

  • SHA512

    3bc5daa32f3d9c71d477c9b165ce74e183c1ae58f1bf9f6002798f7457cb9f5806496b4e158bbf0e0301ff84bb1eb5e6ab636266f3b3bc2363987f7f79f50c73

  • SSDEEP

    786432:+dZ1g21oMbNJ6nK2W3cwlrfYh9eO9/Xg5z7HL1keyKexMMuf8boByyGktxbRZ8X1:+Rj2W3hlrfY/dyhB43uflB3Gkz0NA+

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Update.rar
    .rar

    Password: github

  • Update_30_09/Debug/Addition.dll
  • Update_30_09/Debug/Autoupdater.ini
  • Update_30_09/Debug/DebugPPF.tmp
  • Update_30_09/Debug/DebugPPT.tmp
  • Update_30_09/Debug/Helper.dll
  • Update_30_09/Debug/Management.log
  • Update_30_09/Debug/Portal.dll
    .dll windows:6 windows x64 arch:x64

    Password: github

    9b0781a524349d13dab24794562a9f4f


    Headers

    Imports

    Exports

    Sections

  • Update_30_09/Debug/Res.dll
    .dll windows:6 windows x86 arch:x86

    Password: github

    694bbdd01d5262771f27e7c775c63322


    Headers

    Imports

    Exports

    Sections

  • Update_30_09/Debug/Resource.dll
  • Update_30_09/Debug/main.ini
  • Update_30_09/Debug/ukm_db
  • Update_30_09/Launch.exe
    .exe windows:4 windows x86 arch:x86

    Password: github

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Update_30_09/Packaged/Main.ini
    .xml
  • Update_30_09/Packaged/Res_x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: github

    68a52d7dd14ee2effbb73575ae8a0035


    Headers

    Imports

    Exports

    Sections

  • Update_30_09/Packaged/Resource.dll
  • Update_30_09/Packaged/Utils.dll
    .xml
  • Update_30_09/accessibilitycpl.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: github

    164af912471cbe0c60259e8ab08b3a77


    Headers

    Imports

    Exports

    Sections

  • Update_30_09/buffed/chidedOcurred.xml
    .xml
  • Update_30_09/buffed/decineSatoriiCoppy.xml
    .xml
  • Update_30_09/buffed/ecocide.xml
    .xml
  • Update_30_09/buffed/gheddaOptimal.xml
    .xml
  • Update_30_09/buffed/pickup.xml
    .xml
  • Update_30_09/buffed/pictaviSina.xml
    .xml
  • Update_30_09/oleprn.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: github

    5a9a8e0a0dd00c835eee8847bfab87ac


    Headers

    Imports

    Exports

    Sections

  • Update_30_09/wwancfg.dll
    .dll windows:10 windows x64 arch:x64

    Password: github

    49decdfb6773b3da00526a10323a4d5d


    Headers

    Imports

    Exports

    Sections