General

  • Target

    eefc3d0a6af3df17b4c97f8404509550aa8eb99b3757a0ba4590c6bce88c96ca

  • Size

    3.6MB

  • MD5

    ffdcbdd06ed59b0c4a507cac8d575913

  • SHA1

    de5e9d4384db0866f083db001217373b34451ea6

  • SHA256

    eefc3d0a6af3df17b4c97f8404509550aa8eb99b3757a0ba4590c6bce88c96ca

  • SHA512

    09765eac9a6f6dd493a6907e20f07e756ae443bdb7a2e10233161e179fc46669fa5796b91df57a3e5cf3607d1f9fb4ab33e002e2b596699115b624f09b3dc5b5

  • SSDEEP

    49152:hjt9RArn/oYnZ78RwY8arcQMG6rclercVh+r52P/xyM2DIbucTWE83KxFIydR1LI:DAjQeZ4RwPacOj+rEP/mETlSKvLdLDuj

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • eefc3d0a6af3df17b4c97f8404509550aa8eb99b3757a0ba4590c6bce88c96ca
    .7z
  • IlusionChecker.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • IlusionChecker.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • configuration/config.json
  • configuration/og-names.txt
    .vbs
  • configuration/version.txt