General

  • Target

    TAXUS.rar

  • Size

    3.1MB

  • MD5

    4d6147af50b70cdba5f12d7091193763

  • SHA1

    f043df062ac0b03d9f96a0880c7c51e36d535832

  • SHA256

    0a43f1a63862f041ed231ec4ac2c01d0befa7344cb09c491b4300c7b4c89c9c2

  • SHA512

    798d443c66821377d962bd72eb99a01d2391f5be7cc11429bf4b4ff987dc0e18e6a1ced36ff121dcca15986f708b1741e4f835fe0777b5a23b1581f4a2d051df

  • SSDEEP

    49152:NWwFQ2C7z1ghuyRMu5u+vnMChNUOBHgz/DonOaemw8n+t7HO5icCoo5Lky/4obUW:NWn7JgRMu5bnMEU0irmpdn+tykcgYzmJ

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • TAXUS.rar
    .rar
  • Taxus/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Taxus/ForlornApi.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • Taxus/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Taxus/Scripts/AimBot.txt
  • Taxus/Scripts/Chat Bypass.txt
  • Taxus/Scripts/Dex.txt
  • Taxus/Scripts/Infinity Yield.txt
  • Taxus/Scripts/UNC test.txt
  • Taxus/Taxus.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Taxus/Taxus.exe.config
  • Taxus/Taxus.pdb
  • Taxus/bin/ForlornInject.dll
    .dll windows:6 windows x64 arch:x64

    9c28f4c4f151a56262df5247ebe339ea


    Headers

    Imports

    Exports

    Sections

  • Taxus/bin/Version.txt
  • Taxus/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Taxus/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • Taxus/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Taxus/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • Taxus/workspace/.tests/appendfile.txt
  • Taxus/workspace/.tests/getcustomasset.txt
  • Taxus/workspace/.tests/isfile.txt
  • Taxus/workspace/.tests/listfiles/test_1.txt
  • Taxus/workspace/.tests/listfiles/test_2.txt
  • Taxus/workspace/.tests/loadfile.txt
  • Taxus/workspace/.tests/readfile.txt
  • Taxus/workspace/.tests/writefile
  • Taxus/workspace/.tests/writefile.txt
  • Taxus/workspace/IY_FE.iy