General

  • Target

    sasasa.rar

  • Size

    52.2MB

  • MD5

    59f794fea5bfd53feb55c754cf2b1a52

  • SHA1

    2878304c317d05daff6f30de640ab64742b2dd77

  • SHA256

    0c4b7a3670f4ef5f7ba2d7e820cb3df837a72c08a4d039768b50617c06983308

  • SHA512

    2b48c5160a7d2ec0c67c1ed119e666a8a509f64b43f94835a77041e58d025dfcc0df7a969d2cf83c9a1453fd9e5f0f4fadaf7975c4e1255b89f866fac785fc6b

  • SSDEEP

    786432:SRbg1VYxvtPUpHOL7Of0Ub+yoAoxGfMvJLniIroQtC311gqkYdGYD0AWWQQHp22C:SBTdL6f0UbnoA+LzZgqxQHQQs2pemJC

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • sasasa.rar
    .rar
  • 0oj3.exe
    .exe windows:6 windows x64 arch:x64

    2d8a5e58d526003f6a539cdef176c461


    Headers

    Imports

    Sections

  • Config.ini
  • interception.dll
    .dll windows:6 windows x64 arch:x64

    fc13c2509303a1017f557c2e52abb49d


    Headers

    Imports

    Exports

    Sections

  • libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • onnxruntime.dll
    .dll windows:6 windows x64 arch:x64

    fb2529868b50d3865209839adada4239


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • opencv_world490.dll
    .dll windows:6 windows x64 arch:x64

    91ed45288888313675c2c30707f8c0fe


    Headers

    Imports

    Exports

    Sections