General

  • Target

    Clamp Executor 1.0.zip

  • Size

    9.2MB

  • MD5

    7a94657b1d0318027f47e15d95ead728

  • SHA1

    44d35fecec35245854e85286214fd77a882ed8f1

  • SHA256

    509d88d67dea78f1801ff182eea95f75d22cb7a8493ae6864f3711fa5d7d71ba

  • SHA512

    e2938b88e114c5204b0c2b11fd0494b2eb686f9dcabb95dc8e4130d1b78e4a44ff8de92e048167aaebbde06b55fd46d493142445074df671002c105645c99cd0

  • SSDEEP

    196608:v5yx7R3tZQLFRKMtBzpRW9gxpehJVczBwMg4cioq7vMiqY72msGKohn:vkRspRzeL6q2CqYiqY72Knhn

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Clamp Executor 1.0.zip
    .zip
  • ClampExecutor.deps.json
  • ClampExecutor.dll
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ClampExecutor.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • ClampExecutor.pdb
  • ClampExecutor.runtimeconfig.json
  • ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Microsoft.Windows.SDK.NET.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • WinRT.Runtime.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    dc5ffe84bd3b4405ea83f693b055c515


    Headers

    Imports

    Exports

    Sections

  • bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • cxapis.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • workspace/.tests/appendfile.txt
  • workspace/.tests/getcustomasset.txt
  • workspace/.tests/isfile.txt
  • workspace/.tests/listfiles/test_1.txt
  • workspace/.tests/listfiles/test_2.txt
  • workspace/.tests/loadfile.txt
  • workspace/.tests/readfile.txt
  • workspace/.tests/writefile
  • workspace/.tests/writefile.txt
  • workspace/IY_FE.iy