General

  • Target

    Rebel.7z

  • Size

    8.1MB

  • MD5

    4a8429dd823216bda95f67f85483a8d9

  • SHA1

    77640784d85848c945820d37794839f346f138d2

  • SHA256

    cef9230ad3111e4a233e61b49ac977d4d25849061a90b05c3e7d6f308022b4de

  • SHA512

    1d4d41cee280c62657b17c2ddc11fc7ce6bab42204d94fe05eed263d139765c19dfd16f2fde4b4e5e8b925c39945c3208600a2bfad941e4723d3bfeb7c30b91a

  • SSDEEP

    196608:15bVwZ4n4D4PLSFpJah2Hc4sEYcGijKseRAKvpZheSaE:155EAWpSt/DcFjqRAKvnhpd

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Rebel.7z
    .7z

    Password: Cracked

  • Rebel/Bin/Injector.exe
    .exe windows:6 windows x64 arch:x64

    Password: Cracked

    076acaa656f74379ef1e60670f0fed54


    Headers

    Imports

    Exports

    Sections

  • Rebel/Bin/Rebel.dll
    .dll windows:6 windows x64 arch:x64

    Password: Cracked

    5dbd05d0457a91e7c32b011f85e7842c


    Headers

    Imports

    Exports

    Sections

  • Rebel/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    Password: Cracked

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Rebel/FastColoredTextBox.xml
    .xml
  • Rebel/ReadMe.txt
  • Rebel/RebelCracked.exe
    .exe windows:4 windows x86 arch:x86

    Password: Cracked

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Rebel/System.CodeDom.dll
    .dll windows:4 windows x86 arch:x86

    Password: Cracked

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Rebel/System.CodeDom.xml