General

  • Target

    New folder.rar

  • Size

    3.1MB

  • MD5

    0f7e60c821d2fec96a19bf6278444ff6

  • SHA1

    ae0aeae53a8df4c5bd7f742812e2e0478cead4e1

  • SHA256

    085547a82141160dbab3f8d0b861dd506afd9b8c9b414d3506606f0d3c17a278

  • SHA512

    71681734b8d908b3346739848854c4950a2b6105ec1309495520eda3b3bc2c1bbcc866e98fd9f97a1c0ed6540add10c307f6888cf8d32f21d62725af68c9bd03

  • SSDEEP

    49152:peQMaLXbjNhLFnY0jCFwKq6C1A6VWc13mIL0e2Zc01eq5r8kIqAnPbihxh:pNMeY0m5YFVvFmc0e1Pq5dIrj4xh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • New folder.rar
    .rar
  • Sigmastart.bat
  • certifi/__init__.py
  • certifi/__main__.py
  • certifi/__pycache__/__init__.cpython-312.pyc
  • certifi/__pycache__/__init__.cpython-313.pyc
  • certifi/__pycache__/__main__.cpython-312.pyc
  • certifi/__pycache__/core.cpython-312.pyc
  • certifi/__pycache__/core.cpython-313.pyc
  • certifi/cacert.pem
  • certifi/core.py
  • charset_normalizer/__init__.py
  • charset_normalizer/__main__.py
  • charset_normalizer/__pycache__/__init__.cpython-312.pyc
  • charset_normalizer/__pycache__/__init__.cpython-313.pyc
  • charset_normalizer/__pycache__/__main__.cpython-312.pyc
  • charset_normalizer/__pycache__/api.cpython-312.pyc
  • charset_normalizer/__pycache__/api.cpython-313.pyc
  • charset_normalizer/__pycache__/cd.cpython-312.pyc
  • charset_normalizer/__pycache__/cd.cpython-313.pyc
  • charset_normalizer/__pycache__/constant.cpython-312.pyc
  • charset_normalizer/__pycache__/constant.cpython-313.pyc
  • charset_normalizer/__pycache__/legacy.cpython-312.pyc
  • charset_normalizer/__pycache__/legacy.cpython-313.pyc
  • charset_normalizer/__pycache__/md.cpython-312.pyc
  • charset_normalizer/__pycache__/md.cpython-313.pyc
  • charset_normalizer/__pycache__/models.cpython-312.pyc
  • charset_normalizer/__pycache__/models.cpython-313.pyc
  • charset_normalizer/__pycache__/utils.cpython-312.pyc
  • charset_normalizer/__pycache__/utils.cpython-313.pyc
  • charset_normalizer/__pycache__/version.cpython-312.pyc
  • charset_normalizer/__pycache__/version.cpython-313.pyc
  • charset_normalizer/api.py
  • charset_normalizer/cd.py
  • charset_normalizer/cli/__init__.py
  • charset_normalizer/cli/__main__.py
  • charset_normalizer/cli/__pycache__/__init__.cpython-312.pyc
  • charset_normalizer/cli/__pycache__/__main__.cpython-312.pyc
  • charset_normalizer/constant.py
  • charset_normalizer/legacy.py
  • charset_normalizer/md.cp312-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    f9f58fd722dea53fe5b29a3d6dba9a29


    Headers

    Imports

    Exports

    Sections

  • charset_normalizer/md.py
  • charset_normalizer/md__mypyc.cp312-win_amd64.pyd
    .dll windows:6 windows x64 arch:x64

    facfc5ec70708b6566f37401fb8a64c6


    Headers

    Imports

    Exports

    Sections

  • charset_normalizer/models.py
  • charset_normalizer/utils.py
  • charset_normalizer/version.py
  • idna/__init__.py
  • idna/__pycache__/__init__.cpython-312.pyc
  • idna/__pycache__/__init__.cpython-313.pyc
  • idna/__pycache__/codec.cpython-312.pyc
  • idna/__pycache__/compat.cpython-312.pyc
  • idna/__pycache__/core.cpython-312.pyc
  • idna/__pycache__/core.cpython-313.pyc
  • idna/__pycache__/idnadata.cpython-312.pyc
  • idna/__pycache__/idnadata.cpython-313.pyc
  • idna/__pycache__/intranges.cpython-312.pyc
  • idna/__pycache__/intranges.cpython-313.pyc
  • idna/__pycache__/package_data.cpython-312.pyc
  • idna/__pycache__/package_data.cpython-313.pyc
  • idna/__pycache__/uts46data.cpython-312.pyc
  • idna/codec.py
  • idna/compat.py
  • idna/core.py
  • idna/idnadata.py
  • idna/intranges.py
  • idna/package_data.py
  • idna/uts46data.py
    .py .vbs
  • python.exe
    .exe windows:6 windows x64 arch:x64

    d233964eaa90e1b69b31d0c96b47b8d3


    Code Sign

    Headers

    Imports

    Sections

  • python313.dll
    .dll windows:6 windows x64 arch:x64

    4afaa84a04fab1eb02741ca485fe6575


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • requests/__init__.py
  • requests/__pycache__/__init__.cpython-312.pyc
  • requests/__pycache__/__init__.cpython-313.pyc
  • requests/__pycache__/__version__.cpython-312.pyc
  • requests/__pycache__/__version__.cpython-313.pyc
  • requests/__pycache__/_internal_utils.cpython-312.pyc
  • requests/__pycache__/_internal_utils.cpython-313.pyc
  • requests/__pycache__/adapters.cpython-312.pyc
  • requests/__pycache__/adapters.cpython-313.pyc
  • requests/__pycache__/api.cpython-312.pyc
  • requests/__pycache__/api.cpython-313.pyc
  • requests/__pycache__/auth.cpython-312.pyc
  • requests/__pycache__/auth.cpython-313.pyc
  • requests/__pycache__/certs.cpython-312.pyc
  • requests/__pycache__/certs.cpython-313.pyc
  • requests/__pycache__/compat.cpython-312.pyc
  • requests/__pycache__/compat.cpython-313.pyc
  • requests/__pycache__/cookies.cpython-312.pyc
  • requests/__pycache__/cookies.cpython-313.pyc
  • requests/__pycache__/exceptions.cpython-312.pyc
  • requests/__pycache__/exceptions.cpython-313.pyc
  • requests/__pycache__/help.cpython-312.pyc
  • requests/__pycache__/hooks.cpython-312.pyc
  • requests/__pycache__/hooks.cpython-313.pyc
  • requests/__pycache__/models.cpython-312.pyc
  • requests/__pycache__/models.cpython-313.pyc
  • requests/__pycache__/packages.cpython-312.pyc
  • requests/__pycache__/packages.cpython-313.pyc
  • requests/__pycache__/sessions.cpython-312.pyc
  • requests/__pycache__/sessions.cpython-313.pyc
  • requests/__pycache__/status_codes.cpython-312.pyc
  • requests/__pycache__/status_codes.cpython-313.pyc
  • requests/__pycache__/structures.cpython-312.pyc
  • requests/__pycache__/structures.cpython-313.pyc
  • requests/__pycache__/utils.cpython-312.pyc
  • requests/__pycache__/utils.cpython-313.pyc
  • requests/__version__.py
  • requests/_internal_utils.py
  • requests/adapters.py
  • requests/api.py
  • requests/auth.py
  • requests/certs.py
    .py .sh linux
  • requests/compat.py
  • requests/cookies.py
  • requests/exceptions.py
  • requests/help.py
  • requests/hooks.py
  • requests/models.py
  • requests/packages.py
  • requests/sessions.py
  • requests/status_codes.py
  • requests/structures.py
  • requests/utils.py
  • sigma.py
  • urllib3/__init__.py
  • urllib3/__pycache__/__init__.cpython-312.pyc
  • urllib3/__pycache__/__init__.cpython-313.pyc
  • urllib3/__pycache__/_base_connection.cpython-312.pyc
  • urllib3/__pycache__/_base_connection.cpython-313.pyc
  • urllib3/__pycache__/_collections.cpython-312.pyc
  • urllib3/__pycache__/_collections.cpython-313.pyc
  • urllib3/__pycache__/_request_methods.cpython-312.pyc
  • urllib3/__pycache__/_request_methods.cpython-313.pyc
  • urllib3/__pycache__/_version.cpython-312.pyc
  • urllib3/__pycache__/_version.cpython-313.pyc
  • urllib3/__pycache__/connection.cpython-312.pyc
  • urllib3/__pycache__/connection.cpython-313.pyc
  • urllib3/__pycache__/connectionpool.cpython-312.pyc
  • urllib3/__pycache__/connectionpool.cpython-313.pyc
  • urllib3/__pycache__/exceptions.cpython-312.pyc
  • urllib3/__pycache__/exceptions.cpython-313.pyc
  • urllib3/__pycache__/fields.cpython-312.pyc
  • urllib3/__pycache__/fields.cpython-313.pyc
  • urllib3/__pycache__/filepost.cpython-312.pyc
  • urllib3/__pycache__/filepost.cpython-313.pyc
  • urllib3/__pycache__/http2.cpython-312.pyc
  • urllib3/__pycache__/poolmanager.cpython-312.pyc
  • urllib3/__pycache__/poolmanager.cpython-313.pyc
  • urllib3/__pycache__/response.cpython-312.pyc
  • urllib3/__pycache__/response.cpython-313.pyc
  • urllib3/_base_connection.py
  • urllib3/_collections.py
  • urllib3/_request_methods.py
  • urllib3/_version.py
  • urllib3/connection.py
    .py .js
  • urllib3/connectionpool.py
  • urllib3/contrib/__pycache__/__init__.cpython-312.pyc
  • urllib3/contrib/__pycache__/__init__.cpython-313.pyc
  • urllib3/contrib/__pycache__/pyopenssl.cpython-312.pyc
    .js
  • urllib3/contrib/__pycache__/socks.cpython-312.pyc
  • urllib3/contrib/__pycache__/socks.cpython-313.pyc
  • urllib3/contrib/emscripten/__init__.py
  • urllib3/contrib/emscripten/__pycache__/__init__.cpython-312.pyc
  • urllib3/contrib/emscripten/__pycache__/connection.cpython-312.pyc
  • urllib3/contrib/emscripten/__pycache__/fetch.cpython-312.pyc
  • urllib3/contrib/emscripten/__pycache__/request.cpython-312.pyc
  • urllib3/contrib/emscripten/__pycache__/response.cpython-312.pyc
  • urllib3/contrib/emscripten/connection.py
  • urllib3/contrib/emscripten/emscripten_fetch_worker.js
    .js
  • urllib3/contrib/emscripten/fetch.py
  • urllib3/contrib/emscripten/request.py
  • urllib3/contrib/emscripten/response.py
  • urllib3/contrib/pyopenssl.py
    .py .js
  • urllib3/contrib/socks.py
  • urllib3/exceptions.py
  • urllib3/fields.py
  • urllib3/filepost.py
  • urllib3/http2.py
  • urllib3/poolmanager.py
  • urllib3/py.typed
  • urllib3/response.py
  • urllib3/util/__init__.py
  • urllib3/util/__pycache__/__init__.cpython-312.pyc
  • urllib3/util/__pycache__/__init__.cpython-313.pyc
  • urllib3/util/__pycache__/connection.cpython-312.pyc
  • urllib3/util/__pycache__/connection.cpython-313.pyc
  • urllib3/util/__pycache__/proxy.cpython-312.pyc
  • urllib3/util/__pycache__/proxy.cpython-313.pyc
  • urllib3/util/__pycache__/request.cpython-312.pyc
  • urllib3/util/__pycache__/request.cpython-313.pyc
  • urllib3/util/__pycache__/response.cpython-312.pyc
  • urllib3/util/__pycache__/response.cpython-313.pyc
  • urllib3/util/__pycache__/retry.cpython-312.pyc
  • urllib3/util/__pycache__/retry.cpython-313.pyc
  • urllib3/util/__pycache__/ssl_.cpython-312.pyc
  • urllib3/util/__pycache__/ssl_.cpython-313.pyc
  • urllib3/util/__pycache__/ssl_match_hostname.cpython-312.pyc
  • urllib3/util/__pycache__/ssl_match_hostname.cpython-313.pyc
  • urllib3/util/__pycache__/ssltransport.cpython-312.pyc
    .js
  • urllib3/util/__pycache__/ssltransport.cpython-313.pyc
    .js
  • urllib3/util/__pycache__/timeout.cpython-312.pyc
  • urllib3/util/__pycache__/timeout.cpython-313.pyc
  • urllib3/util/__pycache__/url.cpython-312.pyc
  • urllib3/util/__pycache__/url.cpython-313.pyc
  • urllib3/util/__pycache__/util.cpython-312.pyc
  • urllib3/util/__pycache__/util.cpython-313.pyc
  • urllib3/util/__pycache__/wait.cpython-312.pyc
  • urllib3/util/__pycache__/wait.cpython-313.pyc
  • urllib3/util/connection.py
    .py .js
  • urllib3/util/proxy.py
  • urllib3/util/request.py
  • urllib3/util/response.py
  • urllib3/util/retry.py
  • urllib3/util/ssl_.py
  • urllib3/util/ssl_match_hostname.py
  • urllib3/util/ssltransport.py
    .py .js
  • urllib3/util/timeout.py
    .py .js
  • urllib3/util/url.py
  • urllib3/util/util.py
  • urllib3/util/wait.py