Resubmissions

14/10/2024, 01:51

241014-caaxxszdnk 10

14/10/2024, 01:46

241014-b67q4avgrc 10

General

  • Target

    xil222.zip

  • Size

    20.5MB

  • MD5

    06547bc5ef9279fcea17886078d00db6

  • SHA1

    798874097e6dddfd12e8aecf42e3d79329d26fe2

  • SHA256

    74f7e9fcd83b822345756b4ec5c99f02db9e0ccc5e817db73385b61e20283d3c

  • SHA512

    693868fcb3445dcb91af735a146399cf733cecb79a23cbfcbff40e1f48eab429503f100353b33b3eafa29867b1027107549c09565d2991b0a52493fff1bbcdf7

  • SSDEEP

    393216:U+8M1g1dKMqwCho6Yicf8/eQR7I6fE1G3IMgNUeQMDf3Eiv7Eqw/RicFguQW:UwcQ+ChQf8/eQ1fE2eNnzdzEvGuQW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • xil222.zip
    .zip
  • AltoPlugIns.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • Qt5GuiVBox.dll
    .dll windows:6 windows x64 arch:x64

    09337d680521bc6af2a65961220a45bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5SqlVBox.dll
    .dll windows:6 windows x64 arch:x64

    32b1712121a5ab67ba635c0b11511056


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VBoxClient-x86.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    33aa5db5c88c6aeb917724ed39b70930


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VBoxProxyStub-x86.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    5f1487de10f9996626108322a43376d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VBoxRT-x86.dll
    .dll windows:6 windows x86 arch:x86

    c6082545853befd83acc461e6b9aef08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VBoxRT.dll
    .dll windows:6 windows x64 arch:x64

    7a464f68e2fd4335d0d7194a163c7ebe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VBoxSharedClipboard.dll
    .dll windows:6 windows x64 arch:x64

    9ff9da5b3b4f064a6a0e6d80e25179f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VBoxSharedFolders.dll
    .dll windows:6 windows x64 arch:x64

    ca975ac4f367bb5af520cc4b0b459a59


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VBoxSupLib.dll
    .dll windows:6 windows x64 arch:x64

    890d1ba4282cec03928fce63ca7c3eae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XILS.exe
    .exe windows:6 windows x86 arch:x86

    1aae8bf580c846f39c71c05898e57e88


    Headers

    Imports

    Sections

  • bb2018.dll
    .dll windows:5 windows x86 arch:x86

    e57762edb579f961cce983ec7fcff02f


    Headers

    Imports

    Sections

  • libcapstone.dll
    .dll windows:4 windows x64 arch:x64

    5c8f8af1c4cf945d36e9fc61452cdb0e


    Headers

    Imports

    Exports

    Sections

  • libiconv-2.dll
    .dll windows:4 windows x64 arch:x64

    d1b707499a1dc5e6414f511e64677d6b


    Headers

    Imports

    Exports

    Sections

  • libidn2-0.dll
    .dll windows:4 windows x64 arch:x64

    353ef798afd1eaeb2a0dce92d190d6a9


    Headers

    Imports

    Exports

    Sections

  • libintl-8.dll
    .dll windows:4 windows x64 arch:x64

    b27b9ddbf928ae1646f6329a1abf21fd


    Headers

    Imports

    Exports

    Sections

  • libogg.dll
    .dll windows:5 windows x64 arch:x64

    172e9ea1474e5221e7871addb5f29396


    Headers

    Imports

    Exports

    Sections

  • libpng16-16.dll
    .dll windows:4 windows x64 arch:x64

    49e998f2d6fd304644cc98e8be6f9dbf


    Headers

    Imports

    Exports

    Sections

  • libpsl-5.dll
    .dll windows:4 windows x64 arch:x64

    aae0d88f57028091552794a2909d1fe6


    Headers

    Imports

    Exports

    Sections

  • qsqlite.dll
    .dll windows:6 windows x64 arch:x64

    64c41af615ea8eab28f9b9bb60e31bc0


    Code Sign

    Headers

    Imports

    Exports

    Sections