General

  • Target

    Executor.zip

  • Size

    3.4MB

  • MD5

    c54aa5e8517df29f759d118731ef6289

  • SHA1

    ddcc3931d474ebb341f7732c13096d20d0cd4a01

  • SHA256

    35aafa54f74d51268c1c99389dbafb2ff5835a30e5dec0bb6e8c239608e4c194

  • SHA512

    f0999c0306f7e2c1dc588acbc7cb5e47bdda3be80b6616d196da846953405b568f94161bc14a8ddc52fdfc1b2201a844270ed9d79e35475d31e5ce4867198587

  • SSDEEP

    98304:OjHn2Htb9EG4lcvzBHdnpsi8BRb1hXf7/xlufgdrySIpWFW:OjHAROWzB9iPR5hLzdr6b

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • Executor.zip
    .zip
  • Bypasser Community.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Bypasser Community.exe.config
  • Bypasser Community.pdb
  • Bypasser.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • BypasserAPI.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • FastColoredTextBox.pdb
  • ForlornApi.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • forloninject/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    dc5ffe84bd3b4405ea83f693b055c515


    Headers

    Imports

    Exports

    Sections

  • forloninject/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • forloninject/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • forloninject/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • forloninject/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • workspace/IY_FE.iy
  • workspace/OrionTest/111958650.txt
  • workspace/OrionTest/6578392500.txt