General

  • Target

    Debug.rar

  • Size

    2.4MB

  • MD5

    9f15558ee9f162f9983169b090cad572

  • SHA1

    63764362b4c3c2315cdb226e8e3a3f4f6fbfc6cd

  • SHA256

    abe3ca48b96f8d91d7be9593d0c40dd871438f668f3dc284459ce6bd4a36f149

  • SHA512

    84847e19a293e3b66b6f891b0d7de9e92dfd2e6c65670821392f392201cfa30981ec2de74a2b9ab83beccd9cec9b0b74656c1e4afba5455b597faa50c0fcb8c6

  • SSDEEP

    49152:auvR0i0ncLKHB+EQMZCj0LGaIVuUJcVQzX5OLc8Kcn99RdEaz1KY9kxJt:rR70ncLKHPZCXV1RzpOLc+9aM/knt

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Debug.rar
    .rar
  • Debug/ForlornApi.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • Debug/IslandBetaInterface.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Debug/IslandBetaInterface.exe.config
  • Debug/IslandBetaInterface.pdb
  • Debug/autoexec/Infinite Yeild.lua
    .js
  • Debug/bin/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    942c95c90660298c72e7ffe4c75ec2c1


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • Debug/workspace/IY_FE.iy