General

  • Target

    api.rar

  • Size

    6.1MB

  • MD5

    eb2841f4bdff87a869355525c7320da1

  • SHA1

    b6e8a0d5c9f04c0cc852fe3a729d559306b125e3

  • SHA256

    42c1b098fae6e390895398ee8e585b6846a1484debd5c3a28826751bd95bb736

  • SHA512

    9a7808377ed9492a21b8eee71b836a717dc5568040c12ebab431342b8e662229872e0cdbf6a02e01be287fad48d03937d1bb7acf5f1dfdffb1d7ca686b8b2717

  • SSDEEP

    196608:IlsVGW33TuzUsbBosMFaN8nItaQNZD6zCV:F33TiUsb98nuF

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • api.rar
    .rar
  • api/ForlornApiTut/.vs/ForlornApiTut/FileContentIndex/4aac3ebf-adba-4b62-844d-aefb02bdd1d4.vsidx
  • api/ForlornApiTut/.vs/ForlornApiTut/FileContentIndex/bf0d815e-3dc6-415c-9665-2141b7d7e581.vsidx
  • api/ForlornApiTut/.vs/ForlornApiTut/FileContentIndex/dd90b4da-b6f3-48fa-9fd9-75703a2fb564.vsidx
  • api/ForlornApiTut/.vs/ForlornApiTut/v17/.suo
  • api/ForlornApiTut/.vs/ForlornApiTut/v17/DocumentLayout.backup.json
  • api/ForlornApiTut/.vs/ForlornApiTut/v17/DocumentLayout.json
  • api/ForlornApiTut/ForlornApiTut.sln
  • api/ForlornApiTut/ForlornApiTut/App.config
  • api/ForlornApiTut/ForlornApiTut/ForlornApiTut.csproj
  • api/ForlornApiTut/ForlornApiTut/Form1.Designer.cs
  • api/ForlornApiTut/ForlornApiTut/Form1.cs
  • api/ForlornApiTut/ForlornApiTut/Form1.resx
    .vbs
  • api/ForlornApiTut/ForlornApiTut/Program.cs
  • api/ForlornApiTut/ForlornApiTut/Properties/AssemblyInfo.cs
  • api/ForlornApiTut/ForlornApiTut/Properties/Resources.Designer.cs
    .vbs
  • api/ForlornApiTut/ForlornApiTut/Properties/Resources.resx
    .vbs
  • api/ForlornApiTut/ForlornApiTut/Properties/Settings.Designer.cs
  • api/ForlornApiTut/ForlornApiTut/Properties/Settings.settings
  • api/ForlornApiTut/ForlornApiTut/bin/Debug/ForlornApi.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • api/ForlornApiTut/ForlornApiTut/bin/Debug/ForlornApiTut.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • api/ForlornApiTut/ForlornApiTut/bin/Debug/ForlornApiTut.exe.config
  • api/ForlornApiTut/ForlornApiTut/bin/Debug/ForlornApiTut.pdb
  • api/ForlornApiTut/ForlornApiTut/bin/Debug/bin/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    0b29822e58e33f37031b4b82f1dc0199


    Headers

    Imports

    Exports

    Sections

  • api/ForlornApiTut/ForlornApiTut/bin/Debug/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    efa5154dc444ee48588122f4314818b1


    Headers

    Imports

    Exports

    Sections

  • api/ForlornApiTut/ForlornApiTut/bin/Debug/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    52e1f768552adf256b0f59086f39cc27


    Headers

    Imports

    Exports

    Sections

  • api/ForlornApiTut/ForlornApiTut/bin/Debug/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    248d10dc76c47cf9621fdbb0f53e9477


    Headers

    Imports

    Exports

    Sections

  • api/ForlornApiTut/ForlornApiTut/bin/Debug/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    3d3d86ab463e72e0c6af27621c46c717


    Headers

    Imports

    Exports

    Sections

  • api/ForlornApiTut/ForlornApiTut/bin/Debug/workspace/.tests/appendfile.txt
  • api/ForlornApiTut/ForlornApiTut/bin/Debug/workspace/.tests/getcustomasset.txt
  • api/ForlornApiTut/ForlornApiTut/bin/Debug/workspace/.tests/isfile.txt
  • api/ForlornApiTut/ForlornApiTut/bin/Debug/workspace/.tests/listfiles/test_1.txt
  • api/ForlornApiTut/ForlornApiTut/bin/Debug/workspace/.tests/listfiles/test_2.txt
  • api/ForlornApiTut/ForlornApiTut/bin/Debug/workspace/.tests/loadfile.txt
  • api/ForlornApiTut/ForlornApiTut/bin/Debug/workspace/.tests/readfile.txt
  • api/ForlornApiTut/ForlornApiTut/bin/Debug/workspace/.tests/writefile
  • api/ForlornApiTut/ForlornApiTut/bin/Debug/workspace/.tests/writefile.txt
  • api/ForlornApiTut/ForlornApiTut/bin/Debug/workspace/9449eab17b79d158aa90c0e69f640e19-cache.lua
    .js
  • api/ForlornApiTut/ForlornApiTut/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs
  • api/ForlornApiTut/ForlornApiTut/obj/Debug/DesignTimeResolveAssemblyReferences.cache
  • api/ForlornApiTut/ForlornApiTut/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
  • api/ForlornApiTut/ForlornApiTut/obj/Debug/ForlornApiTut.Form1.resources
  • api/ForlornApiTut/ForlornApiTut/obj/Debug/ForlornApiTut.Properties.Resources.resources
  • api/ForlornApiTut/ForlornApiTut/obj/Debug/ForlornApiTut.csproj.AssemblyReference.cache
  • api/ForlornApiTut/ForlornApiTut/obj/Debug/ForlornApiTut.csproj.CoreCompileInputs.cache
  • api/ForlornApiTut/ForlornApiTut/obj/Debug/ForlornApiTut.csproj.FileListAbsolute.txt
  • api/ForlornApiTut/ForlornApiTut/obj/Debug/ForlornApiTut.csproj.GenerateResource.cache
  • api/ForlornApiTut/ForlornApiTut/obj/Debug/ForlornApiTut.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • api/ForlornApiTut/ForlornApiTut/obj/Debug/ForlornApiTut.pdb