General

  • Target

    Debug.zip

  • Size

    9.5MB

  • MD5

    91f30e8150c99774a83b37adc787b690

  • SHA1

    f01444995ce2d0a36314a9c19cd2a1f37b0499a8

  • SHA256

    c351b88fec149e5554dc62cfc3452cefe4b2603d6205dd68ce3e358ee014ae33

  • SHA512

    88de03cbaebf18c203cf3a1ec15a0858c28ed29c152ea74b16e0c009053e88789fe4f41ae420b4374daaae601205e60c71c5840ff138ebe33ec4e13a62ea8578

  • SSDEEP

    196608:JKckQWmdEVB3QE7XAfhvCDuWu2mOs1CPwDvt3uFGCCyAukt:cmNdEVB3QEjAfhvcuWu7Os1CPwDvt3uE

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 2 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Debug.zip
    .zip
  • Debug/Et4xp.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Debug/Et4xp.exe.config
  • Debug/Et4xp.pdb
  • Debug/ForlornApi.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • Debug/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/bin/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    ac435dfa812fddee99bbf7a986186d1d


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • Debug/workspace/IY_FE.iy
  • Debug/workspace/Scripts/Inf Yield.txt
    .js