General

  • Target

    Gray-Ware.zip

  • Size

    3.4MB

  • MD5

    ad85e499df5c4d7c52962014b153e578

  • SHA1

    dc7a1a57498731bb39cc7295b2f5abcea458e16e

  • SHA256

    38acce4395e9fbec30558f0f8585d839d3947f6d531543877aa58332490e1296

  • SHA512

    b4eece5596458c92f1d4b2aa8b8a0b8fa85e5ccbcb3e4b2dfc5da16759c03391dcc3cb8ade964f90c3f59faf99b9847981c571ad6d8f2135633b7e47a16aaf1d

  • SSDEEP

    98304:CzCWUmM3OGOjWh3sflOl6UdWZVsb7kMQglwQ8:C2WUNLAK3vlcq7kMJwr

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Gray-Ware.zip
    .zip
  • Gray-Ware/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Gray-Ware/FastColoredTextBox.xml
    .xml
  • Gray-Ware/Gray-Ware.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Gray-Ware/Siticone.UI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Gray-Ware/TestExecutor.exe.config
    .xml
  • Gray-Ware/TestExecutor.pdb
  • Gray-Ware/VisualStudioTabControl.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Gray-Ware/bin/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    3a1f9d973bff43051a3daf411f707362


    Headers

    Imports

    Exports

    Sections

  • Gray-Ware/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Gray-Ware/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • Gray-Ware/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Gray-Ware/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • Gray-Ware/cxapis.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • Gray-Ware/workspace/.tests/appendfile.txt
  • Gray-Ware/workspace/.tests/getcustomasset.txt
  • Gray-Ware/workspace/.tests/isfile.txt
  • Gray-Ware/workspace/.tests/listfiles/test_1.txt
  • Gray-Ware/workspace/.tests/listfiles/test_2.txt
  • Gray-Ware/workspace/.tests/loadfile.txt
  • Gray-Ware/workspace/.tests/readfile.txt
  • Gray-Ware/workspace/.tests/writefile
  • Gray-Ware/workspace/.tests/writefile.txt
  • Gray-Ware/workspace/IY_FE.iy