General

  • Target

    Opticalv1.3.zip

  • Size

    9.8MB

  • MD5

    2f6ade21f098d0c8d7e96054701836d1

  • SHA1

    770d150bb129afccfac602a97fab7a5fa6fd1559

  • SHA256

    76e931faa487ffd5b863bc4f351fac3c0812f49c9a2240b69912e75eb6dcd6af

  • SHA512

    c67622b87bd3f7b1f32e0104490f8b46a7044bfcbb9493e704cd1f49c3b250dd3fb23fcd82ed1e8113d942f381bdd3874fbfb7b6c62be5a8e9d31237daedf3c0

  • SSDEEP

    196608:srqEP/E3dEVB3N9eXCyt8yLre39yk1CPwDvt3uFGCCV:tY/E3dEVB3N9eXCyt8yLre34k1CPwDvP

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 2 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • Opticalv1.3.zip
    .zip
  • Opticalv1.3/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Opticalv1.3/ForlornApi.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • Opticalv1.3/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Opticalv1.3/Optical.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Opticalv1.3/Optical.exe.config
  • Opticalv1.3/Optical.pdb
  • Opticalv1.3/bin/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    dc5ffe84bd3b4405ea83f693b055c515


    Headers

    Imports

    Exports

    Sections

  • Opticalv1.3/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Opticalv1.3/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • Opticalv1.3/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Opticalv1.3/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • Opticalv1.3/workspace/IY_FE.iy