General

  • Target

    mHzqh5O.zip

  • Size

    2.8MB

  • MD5

    2eb8b94625711bd6dcd16ae827578e76

  • SHA1

    28abbf3a8e54ba0a183398e344800ac4b54948d2

  • SHA256

    b5721d616aa2e9770be2e87a56f670f1c2db6bc7e44c2b2bad731fbd4cb196f5

  • SHA512

    74f2573a4cdba1f9094ad8174f09d2ec91d80c54a261e1193961d24ce858d800103544018f8587b8cf34295cfe4199207b36eb87677eadde0a5b25dac293a8a9

  • SSDEEP

    49152:01Bt3Ii6i+chPwb56vkIwKIFdZyn+4pWpm380tZQuykvBQtLyaErxtNfRTiTI98e:01Bi5yP86sIwKAC3tZQ3kvBQtLXSzNf5

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • mHzqh5O.zip
    .zip
  • Project Ligma.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • bin/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    3a1f9d973bff43051a3daf411f707362


    Headers

    Imports

    Exports

    Sections

  • bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • cver.txt
  • cxapis.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections