General

  • Target

    S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!.rar

  • Size

    13.0MB

  • MD5

    3c716147ed6cc10fedc8ac6675b25a5e

  • SHA1

    74546aa2431cd9b8073452201934dacf6ebcb3d7

  • SHA256

    53b23b09e3c5b62262a148c0f4a0a5c270ba95990fad8f639e29d04a6b4be8fe

  • SHA512

    a1ae07d2e992503019d187713690fb2a1be890a27b586941dbcc9f6d858c5627bfb24cd2bb1693cb24802ffaa4936928f02e16ee9a1b5324e4174a17d079a1aa

  • SSDEEP

    196608:Rf8i2gypKxc7DtqAa9foI00rEhd183Se0UNJ//qyIxnpgF+7uXoDNAcJjvV7UzQA:J8QWDUr9AIs83vZ/ijp0Y5vJaMha

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!.rar
    .rar

    Password: 8888

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/AXE8SharedExpat.dll
    .dll windows:5 windows x86 arch:x86

    Password: 8888

    a4e787fd0dfc88230e25c529782d2921


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/BIB.dll
    .dll windows:5 windows x86 arch:x86

    Password: 8888

    fe55f0c5d042581ea2ce2b8b0dfa5e3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/CMap/Identity-H
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/CMap/Identity-V
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/CMap/UCS2-GBK-EUC
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/CMap/UniKS-UTF16-H
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/CMap/UniKS-UTF16-V
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/AdobePIStd.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/CourierStd-Bold.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/CourierStd-BoldOblique.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/CourierStd-Oblique.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/CourierStd.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/MinionPro-Bold.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/MinionPro-BoldIt.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/MinionPro-It.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/MinionPro-Regular.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/MyriadPro-Bold.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/MyriadPro-BoldIt.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/MyriadPro-It.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/MyriadPro-Regular.otf
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/Pfm/SY______.PFM
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/Pfm/zx______.pfm
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/Pfm/zy______.pfm
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/SY______.PFB
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/ZX______.PFB
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/Font/ZY______.PFB
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/ICU/icudt26l.dat
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/Set-up.exe
    .exe windows:5 windows x86 arch:x86

    Password: 8888

    7ff4e5e2ed32af169ef0922c44ac5fab


    Code Sign

    Headers

    Imports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    Password: 8888

    2dec2d42421b088bfcddeba53b046464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    Password: 8888

    0453db624ecaef7c4f3da938cd1d0fc5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/qgkgmk
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/resources.pak
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/sqlite.dll
    .dll windows:5 windows x86 arch:x86

    Password: 8888

    db6bf41e9107db27055b84fcca69df8a


    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/syxtqka
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/x86/ACE.dll
    .dll windows:6 windows x86 arch:x86

    Password: 8888

    23076d501d734740bd988395f9a2bdc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/x86/AGM.dll
    .dll windows:6 windows x86 arch:x86

    Password: 8888

    0c4ef399e3ebaa650bb9619d8524550c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/x86/AIDE.dll
    .dll windows:6 windows x86 arch:x86

    35310b00e41c70ccb762d39f144b9fc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/x86/Acrobat/Acrobat32OL.dll
    .dll windows:6 windows x86 arch:x86

    6062013b3a9e7db7d8413ae1dcbbdd2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/x86/Acrobat/Adobe.Acrobat.Dependencies.manifest
    .xml
  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/x86/Acrobat/Onix32.dll
    .dll windows:6 windows x86 arch:x86

    daaa110d62c7d69cff88f74569703386


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/x86/AdobeXMP.dll
    .dll windows:6 windows x86 arch:x86

    6af9b18d0fde4654e8b2a5c75a9563ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/x86/BIB.dll
    .dll windows:6 windows x86 arch:x86

    1d0257e1aac91706ba5a3464d653bbcc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/x86/BIBUtils.dll
    .dll windows:6 windows x86 arch:x86

    6ec1b6b05b219bb02c165a7efc6c6592


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/x86/CoolType.dll
    .dll windows:6 windows x86 arch:x86

    4802bc9f23feb1a2452c8519e072c9db


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • S$$@T_uP_PaS$$S_WoR$D$_8888_!!#!!/x86/JP2KLib.dll
    .dll windows:6 windows x86 arch:x86

    83b05223f39b8593905fca1ffc7a2eba


    Code Sign

    Headers

    Imports

    Exports

    Sections