General

  • Target

    Alfa-Sploit.zip

  • Size

    3.3MB

  • MD5

    b3501eb584f0015e06a12d6a98f8b621

  • SHA1

    1c88a5f928e39919e80a25b3bf94c2e3d9fd3cc4

  • SHA256

    751a52fcacc56343900f6af4cfd059c265928b3bcc60631e5134df70fe6a533b

  • SHA512

    9eff99c72683e761c2072a0ca42c16d9d094ae405e796f20cf2226a5a9d69feaad04f48ca32ef44380480fbb51a0537ab7b42cfb9ee68b3229253a96f8fba03c

  • SSDEEP

    49152:Q4KnE/WjBoNUZ0fn81gmZWUmM3lLTwG+GeuL7sjWySfpVsmMocSk0PkVg6:ACWN9ZizCWUmM3OGOjWX3sfo7kEQg6

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • Alfa-Sploit.zip
    .zip
  • Release/Alfa-Sploit.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Release/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Release/FastColoredTextBox.xml
    .xml
  • Release/ForlornApi.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • Release/bin/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    dc5ffe84bd3b4405ea83f693b055c515


    Headers

    Imports

    Exports

    Sections

  • Release/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Release/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • Release/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Release/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • Release/workspace/.tests/appendfile.txt
  • Release/workspace/.tests/getcustomasset.txt
  • Release/workspace/.tests/isfile.txt
  • Release/workspace/.tests/listfiles/test_1.txt
  • Release/workspace/.tests/listfiles/test_2.txt
  • Release/workspace/.tests/loadfile.txt
  • Release/workspace/.tests/readfile.txt
  • Release/workspace/.tests/writefile
  • Release/workspace/.tests/writefile.txt