General

  • Target

    #Pa$$w0rD__6655--0peɴ_Set-Up.zip

  • Size

    7.2MB

  • MD5

    f9963e5f74f10c8d359f586d6d5e7881

  • SHA1

    fb593871e076e5f2796bd1368f3f47a80ef25549

  • SHA256

    e49f2ed31ee2170d0bcc73f5d15587b90fc0bdb6d500bfcf1e95908640629a97

  • SHA512

    e43b39ca96e595cc5743c0d7f0314d438ea3fa2f05bac890e41a221068b81e338fae41d0bf674ad745bc2d298f8e6c6b7f680a38daf60ee8763d09a92bcb9ab9

  • SSDEEP

    196608:kiUWj4ydJfnyS6q71/9RwpRRqMwn8lX4Lbe/:k3WcCIU7JUp7lwn8q6

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • One or more email addresses in PDF identified

    Detects presence of email addresses in PDF files.

Files

  • #Pa$$w0rD__6655--0peɴ_Set-Up.zip
    .zip

    Password: 6655

  • #Pa$$w0rD__6655--0peɴ_Set-Up.7z
    .7z

    Password: 6655

  • Resources/Data/Config/DisplayLanguageNames.de_CH.txt
  • Resources/Data/Config/DisplayLanguageNames.el_GR_PREEURO.txt
  • Resources/Data/Config/code6.txt
  • Resources/Data/Config/custom-hg-hello.txt
  • Resources/Data/Config/example.com_noroot_v1.0.1.txt
  • Resources/Data/Config/github.com_dmitshur-test_modtest5_v0.5.0-alpha.txt
  • Resources/Data/Config/mod_convert_glide.txt
  • Resources/Data/Config/mod_run_issue52331.txt
  • Resources/Data/Config/msg_30.txt
    .eml

    Password: 6655

  • attachment-1
  • Resources/Data/Config/test_vendor.txt
    .js
  • Resources/Data/Config/todo.txt
  • Resources/Data/Config/work_use_issue55952.txt
  • Resources/Data/DOMCharacterData_data_error_002.phpt
    .js
  • Resources/Data/Microsoft.Azure.ActiveDirectory.GraphClient.dll
    .dll windows:4 windows x86 arch:x86

    Password: 6655

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resources/Data/add_007.phpt
    .js
  • Resources/Data/array_multisort_basic2.phpt
  • Resources/Data/bug47254.phpt
  • Resources/Data/bug75420.7.phpt
  • Resources/Data/bug76601-reload-child-signals.phpt
  • Resources/Data/const.h
  • Resources/Data/cpu_usage.png
    .png

    Password: 6655

  • Resources/Data/create_new_phar_b.phpt
  • Resources/Data/dom_test.inc
    .ps1
  • Resources/Data/ftp_mlsd_missing_directory.phpt
  • Resources/Data/htwj
  • Resources/Data/info/Comparisons.pdf
    .pdf

    Password: 6655

    • http://R-project.org

    • http://libRblas.so

    • http://liblapack.so

    • http://lm.fit

    • mailto:[email protected]

  • Resources/Data/info/DIC Swatch ReadMe.pdf
    .pdf

    Password: 6655

    • http://www.dic.co.jp

    • http://www.dic.co.jp/

  • Resources/Data/info/Design-issues.pdf
    .pdf

    Password: 6655

    • http://1.as

    • http://2.as

    • http://3.as

    • http://4.as

    • http://5.as

    • http://6.as

    • http://and.tr

    • http://i.e.theupperorlowertriangleofm1containsonlyzeros.2.as

    • http://libRblas.so

    • Show all
  • Resources/Data/info/How-To CFF Extension.pdf
    .pdf

    Password: 6655

    • http://rcCheckButton.top

    • http://www.codeproject.com/

  • Resources/Data/info/Introduction.pdf
    .pdf
  • Resources/Data/info/NEWS.pdf
    .pdf
  • Resources/Data/info/approximate.pdf
    .pdf
  • Resources/Data/info/compete.pdf
    .pdf
  • Resources/Data/info/concordance.pdf
    .pdf
  • Resources/Data/info/population.pdf
    .pdf
  • Resources/Data/info/tiedtimes.pdf
    .pdf
  • Resources/Data/info/timedep.pdf
    .pdf
  • Resources/Data/info/viewports.pdf
    .pdf
  • Resources/Data/maddisAsm_.bpl
    .dll windows:5 windows x86 arch:x86

    22531f752b354d949452fbdf15d6da72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/Data/madexcept_.bpl
    .dll windows:5 windows x86 arch:x86

    2a873ab64f922b5d3d6841d9d0c267c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/Data/magic_methods_014.phpt
  • Resources/Data/msenvico.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • Resources/Data/php_libmagic.h
  • Resources/Data/readonly_class_missing_type1.phpt
  • Resources/Data/rncr
  • Resources/Data/serialization_objects_009.phpt
    .js
  • Resources/Data/session_set_save_handler_variation4.phpt
  • Resources/Data/skipLazyInitialization_default.phpt
    .js
  • Resources/Data/x64/ExporterHost.dll
    .dll windows:5 windows x64 arch:x64

    94643dc82cbe43c11dbcb075c29b0942


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/Data/x64/KeccakSponge.h
  • Resources/Data/x64/Microsoft.VisualStudio.Search.Implementation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resources/Data/x64/Microsoft.VisualStudio.VisualC.Utilities.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resources/Data/x64/SplFileObject_fgetcsv_escape_error.phpt
    .js
  • Resources/Data/x64/array_access_006.phpt
  • Resources/Data/x64/bug25922.phpt
  • Resources/Data/x64/bug65510.phpt
  • Resources/Data/x64/bug74269.phpt
  • Resources/Data/x64/missingrepo.txt
  • Resources/Data/x64/msdia140.dll
    .dll regsvr32 windows:6 windows

    8d50acaa5ad162684b4b546518976f7a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/Data/x64/pcjr.testfile
  • Resources/Data/x64/pdo_mysql_stmt_closecursor_empty.phpt
    .js
  • Resources/Data/x64/phar_oo_006.phpt
    .js
  • Resources/Data/x64/posix_getsid_basic.phpt
  • Resources/Data/x64/r4_groupH_simple_rpcenc_017w.phpt
  • Resources/Data/x64/schema041.phpt
  • Resources/Data/x64/ssa_bug_008.phpt
  • Resources/Data/x64/template_cloning.phpt
  • Resources/Data/x64/try_multicatch_007.phpt
    .js
  • Resources/Data/x64/x86/T33.phpt
  • Resources/Data/x64/x86/bug64007.phpt
    .js
  • Resources/Data/x64/x86/bug72094.phpt
  • Resources/Data/x64/x86/foreachLoop.001.phpt
    .ps1
  • Resources/Data/x64/x86/fpm_scoreboard.h
  • Resources/Data/x64/x86/frontcontroller16.phpt
  • Resources/Data/x64/x86/gh12908.phpt
  • Resources/Data/x64/x86/gh13991.phpt
  • Resources/Data/x64/x86/indirectFcall.phpt
    .js
  • Resources/Data/x64/x86/make_s390x_sysv_elf_gas.S
  • Resources/Data/x64/x86/openssl_password.phpt
  • Resources/Data/x64/x86/openssl_verify_basic.phpt
  • Resources/Data/x64/x86/shadow_core.phpt
  • Resources/Data/x64/x86/userstreams_003.phpt
  • Resources/Data/x64/zend_vm_opcodes.c
  • Resources/Data/zend_ini_scanner_defs.h
  • Resources/htwj
  • Resources/maddisAsm_.bpl
    .dll windows:5 windows x86 arch:x86

    22531f752b354d949452fbdf15d6da72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/madexcept_.bpl
    .dll windows:5 windows x86 arch:x86

    2a873ab64f922b5d3d6841d9d0c267c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/rncr
  • Resources/rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    71ef3c08452290b9b380ced40a0015c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/vcl120.bpl
    .dll windows:5 windows x86 arch:x86

    8df8c3c6e47c73ef6aa19581542f5b9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/vclx120.bpl
    .dll windows:5 windows x86 arch:x86

    7f2e89ebd535b27c805b9455db0d7172


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup.exe
    .exe windows:5 windows x86 arch:x86

    f62b90e31eca404f228fcf7068b00f31


    Code Sign

    Headers

    Imports

    Sections