General

  • Target

    Perm.zip

  • Size

    4.5MB

  • MD5

    e93e3f51fb438040f22e9878cba6c569

  • SHA1

    0aa1fe8c472079fbb8cc33e2dccded07738be912

  • SHA256

    b91dc933776990332bd96ae628d0246b1300999b71f7b7e52bd0dd27d268813e

  • SHA512

    866c1c71b8e1305a094f1912b1a8246e0bf04937205dc5af928771c7de13c6f4e5b6aea69786281c37b2fa8ea636582584efd2fc79cec3c9b72f51da3e4181c8

  • SSDEEP

    98304:PpWEBexdA3dx/9pDl5VSy/vsK6OGvbi38TA2dLC9wFfVo/:RMA3dx/JnI038kY6d

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Perm.zip
    .zip

    Password: discord.gg/vixen

  • UTIL/amifldrv64.sys
    .sys windows:6 windows x64 arch:x64

    363922cc73591e60f2af113182414230


    Code Sign

    Headers

    Imports

    Sections

  • UTIL/conspiracy.exe
    .exe windows:6 windows x64 arch:x64

    Password: discord.gg/vixen

    0fc5c1d21aadbda444db1620a3f6dbff


    Headers

    Imports

    Sections

  • spoof perm.bat
    .bat .vbs