General

  • Target

    nonvisible.zip

  • Size

    3.4MB

  • MD5

    d3ffcc262224b4d5478e792b748cc5cd

  • SHA1

    3e84967e924292afcbb364146939a4d78215c8a8

  • SHA256

    cd855a3d855efe3b553bdd53b8649468767b0a239abbfeb288dba920a223e8b2

  • SHA512

    b0d6a189eeefbf97b8f80579d55ecb33f8fa3cccb0657a2e531f9d7d89a91e42706a716f9aa1f5f7abe37565c627b4f410dbc65bcd9e276a1d33033b1719b11b

  • SSDEEP

    49152:MWjBoNUZ04n81gmZWUmM3lLTwG+GeuL7sjWyEfpVsmMBcSkvPkVgJe8lw4:MWN9ZDzCWUmM3OGOjWz3sfB7k3QgJe8b

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • nonvisible.zip
    .zip
  • New folder/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • New folder/Newtonsoft.Json.xml
    .xml
  • New folder/Nonvisible.application
  • New folder/Nonvisible.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • New folder/Nonvisible.exe.config
  • New folder/Nonvisible.exe.manifest
  • New folder/Nonvisible.pdb
  • New folder/app.publish/Nonvisible.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • New folder/bin/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    dc5ffe84bd3b4405ea83f693b055c515


    Headers

    Imports

    Exports

    Sections

  • New folder/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • New folder/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • New folder/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • New folder/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections