Overview

overview

10

Static

static

10

The-MALWAR...36c859

ubuntu-22.04-amd64

8

The-MALWAR...caa742

ubuntu-22.04-amd64

8

The-MALWAR...c1a732

ubuntu-24.04-amd64

8

The-MALWAR...57c046

ubuntu-22.04-amd64

8

The-MALWAR...4cde86

ubuntu-24.04-amd64

8

The-MALWAR...460a01

ubuntu-22.04-amd64

8

The-MALWAR...ece0c5

ubuntu-22.04-amd64

8

The-MALWAR...257619

ubuntu-24.04-amd64

8

The-MALWAR...fbcc59

ubuntu-24.04-amd64

8

The-MALWAR...54f69c

ubuntu-22.04-amd64

8

The-MALWAR...d539a6

ubuntu-24.04-amd64

8

The-MALWAR...4996dd

ubuntu-24.04-amd64

8

The-MALWAR...8232d5

ubuntu-22.04-amd64

8

The-MALWAR...66b948

ubuntu-24.04-amd64

8

The-MALWAR...f9db86

ubuntu-24.04-amd64

8

The-MALWAR...ea2485

ubuntu-22.04-amd64

8

The-MALWAR...us.exe

windows7-x64

6

The-MALWAR...us.exe

windows10-2004-x64

6

The-MALWAR....a.exe

windows7-x64

3

The-MALWAR....a.exe

windows10-2004-x64

3

The-MALWAR....a.exe

windows7-x64

7

The-MALWAR....a.exe

windows10-2004-x64

7

The-MALWAR...ok.exe

windows7-x64

10

The-MALWAR...ok.exe

windows10-2004-x64

1

The-MALWAR...y.html

windows7-x64

3

The-MALWAR...y.html

windows10-2004-x64

3

The-MALWAR...ft.exe

windows7-x64

4

The-MALWAR...ft.exe

windows10-2004-x64

4

The-MALWAR...en.exe

windows7-x64

6

The-MALWAR...en.exe

windows10-2004-x64

6

The-MALWAR...min.js

windows7-x64

3

The-MALWAR...min.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    The-MALWARE-Repo-master.zip

  • Size

    63.3MB

  • MD5

    59cb533617e10ca74e8735ff41e5b823

  • SHA1

    644468d5d6d8fab98268e219e8f2ce518b655ff4

  • SHA256

    7ff2c3acbb884ead411c8b9f0df5b0ca5038333bdf872cb37d5e7eec4ac96b6f

  • SHA512

    9b7e28bde79886ff479110b43380e73c4d1a95c547947abbb1825ed4f5078d3060a4390bf1dcead1d593abe0c0167c396e0aa47b3231eb577737c8c93efbe50b

  • SSDEEP

    1572864:1bR+Nd33aius1Ckqujkhpgz2L9HBlHYSZ95hPfqL55r/XKAM:1ANl3aFs1C4SA2hlHf9Rfi5xjM

Score
10/10
upxmacromacro_on_actionmydoom

Malware Config

Signatures

  • Detects MyDoom family 1 IoCs
  • Mydoom family
    mydoom
  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

    macromacro_on_action
  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

    macro
  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 50 IoCs

    Checks for missing Authenticode signature.

Files

  • The-MALWARE-Repo-master.zip
    .zip
  • The-MALWARE-Repo-master/Botnets/FritzFrog/001eb377f0452060012124cb214f658754c7488ccb82e23ec56b2f45a636c859
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/041bc20ca8ac3161098cbc976e67e3c0f1b672ad36ecbe22fd21cbd53bcaa742
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/0ab8836efcaa62c7daac314e0b7ab1679319b2901578fd9e95ec3476b4c1a732
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/103b8404dc64c9a44511675981a09fd01395ee837452d114f1350c295357c046
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/2378e76aba1ad6e0c937fb39989217bf0de616fdad4726c0f4233bf5414cde86
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/30c150419000d27dafcd5d00702411b2b23b0f5d7e4d0cc729a7d63b2e460a01
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/3205603282a636979a55aa1e1be518cd3adcbbe491745d996ceb4b5a4dece0c5
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/453468b86856665f2cc0e0e71668c0b6aac8b14326c623995ba5963f22257619
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/5fb29fb0136978b9ccf60750af09cec74a257a0ca9c47159ca74dbba21fbcc59
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/6fe6808b9cfe654f526108ec61cb5211bb6601d28e192cadf06102073b54f69c
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/7745b070943e910e8807e3521ac7b7a01401d131bf6c18a63433f8177ed539a6
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/7f18e5b5b7645a80a0d44adf3fecdafcbf937bfe30a4cfb965a1421e034996dd
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/90b61cc77bb2d726219fd00ae2d0ecdf6f0fe7078529e87b7ec8e603008232d5
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/9384b9e39334479194aacb53cb25ace289b6afe2e41bdc8619b2d2cae966b948
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/985ffee662969825146d1b465d068ea4f5f01990d13827511415fd497cf9db86
    .elf linux x64
  • The-MALWARE-Repo-master/Botnets/FritzFrog/d1e82d4a37959a9e6b661e31b8c8c6d2813c93ac92508a2771b2491b04ea2485
    .elf linux x64
  • The-MALWARE-Repo-master/Email-Worm/Amus.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Anap.a.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Axam.a.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Brontok.exe
    .exe windows:4 windows x86 arch:x86

    87bed5a7cba00c7e1f4015f1bdae2183


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/BubbleBoy.html
    .html .vbs polyglot
  • The-MALWARE-Repo-master/Email-Worm/Bugsoft.exe
    .exe windows:4 windows x86 arch:x86

    c1d24f2dee28c26ad20efbfa66d0d726


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Duksten.exe
    .exe windows:4 windows x86 arch:x86

    b82faf9237e7230cc2fbb2f1421d49bf


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Emin.js
    .js
  • The-MALWARE-Repo-master/Email-Worm/Funsoul.exe
    .exe windows:4 windows x86 arch:x86

    7e088f48d6fe44919b9fd479c903f565


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Gruel.a.exe
    .exe windows:4 windows x86 arch:x86

    5c7433b2a8bfdbd866a519f5ce78aa7b


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Happy99.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/ILOVEYOU.vbs
    .vbs
  • The-MALWARE-Repo-master/Email-Worm/Jer.html
    .vbs
  • The-MALWARE-Repo-master/Email-Worm/Kiray.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Klez.e.exe
    .exe windows:4 windows x86 arch:x86

    bb8a672644c54cc80e980f3e174cf92c


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Lacon.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Lentin/Lentin.c.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Lentin/Lentin.d.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Magistr.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Maldal.a.exe
    .exe windows:4 windows x86 arch:x86

    894499b0c1732ab37b759498faae29f0


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Mari.exe
    .exe windows:4 windows x86 arch:x86

    a8e4f0d33f3923214d437634054c49d4


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/MeltingScreen.exe
    .exe windows:4 windows x86 arch:x86

    f90f100c81647f834881cf7cd9e90bd4


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Merkur.exe
    .exe windows:4 windows x86 arch:x86

    4bd626f0fb8783b032a014d7ac172308


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/MsWorld.exe
    .exe windows:4 windows x86 arch:x86

    ce3cbbc1ba1365b2d3ecb9bef12f75b8


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/MyDoom.A.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/MyPics.a.exe
    .exe windows:4 windows x86 arch:x86

    a629f7d0ee066a263e62530ec4b91a16


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/NakedWife.exe
    .exe windows:4 windows x86 arch:x86

    ef6ce2f3d3b25e70f65cfafcb2c7b01e


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/NewLove.vbs
    .vbs
  • The-MALWARE-Repo-master/Email-Worm/Nyxem.E.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Pikachu.exe
    .exe windows:4 windows x86 arch:x86

    cf991f1d207b1a6b956f57f38b2aaa2f


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Pleh.vbs
    .vbs
  • The-MALWARE-Repo-master/Email-Worm/Prolin.exe
    .exe windows:4 windows x86 arch:x86

    b08f58ddcb14d10ef626790a3370327a


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Quamo.exe
    .exe windows:4 windows x86 arch:x86

    c3520ffe4db9de8477f08791726150fa


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/San.html
  • The-MALWARE-Repo-master/Email-Worm/Scare.hta
    .html .vbs polyglot
  • The-MALWARE-Repo-master/Email-Worm/Silver/Silver.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Trood.a.exe
    .exe windows:1 windows x86 arch:x86

    ad3ae4b62b30da87ef6c4e1607fc331b


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/White.a.exe
    .exe windows:4 windows x86 arch:x86

    ff441998bbcbf92dd625ab527152cc7a


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Winevar.exe
    .exe windows:4 windows x86 arch:x86

    82e832e5393272a459a250927a9159b2


    Code Sign

    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Xanax.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/Yarner.a.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Email-Worm/ZippedFiles.a.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Spyware/AgentTesla.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Headers

    Imports

    Sections

  • MaterialDesignColors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MaterialDesignThemes.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MaterialDesignThemes.Wpf.xml
    .xml
  • Microsoft.Management.Infrastructure.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SharpSteam.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • System.Management.Automation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • System.Management.Automation.xml
    .xml
  • UWPHook.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • UWPHook.exe.config
    .xml
  • VDFParser.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Spyware/HawkEye.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Spyware/Kakwa.doc
    .doc windows office2003

    ThisDocument

    qpnyeziw

  • The-MALWARE-Repo-master/Spyware/The Worst Of All!!!!!!/BonziBUDDY!!!!!!.txt
  • The-MALWARE-Repo-master/Spyware/butterflyondesktop.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Virus/Floxif/Floxif.exe
    .exe windows:5 windows x86 arch:x86

    1e8d1e12f2998c7db1084028a8a4301b


    Code Sign

    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Virus/Gnil/Gnil.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • The-MALWARE-Repo-master/Virus/Mabezat/Mabezat.exe
    .exe windows:5 windows x86 arch:x86

    e1d4718531a779a8d41d1fd888af078f


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Virus/MadMan.exe
  • The-MALWARE-Repo-master/Virus/Melissa.doc
    .doc windows office2003

    Melissa

  • The-MALWARE-Repo-master/Virus/Walker.com
  • The-MALWARE-Repo-master/Virus/WinNuke.98.exe
    .exe windows:4 windows x86 arch:x86

    e85cb1c4db79eee3be998741daba934f


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Virus/Xpaj/xpaj.exe
    .exe windows:5 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • The-MALWARE-Repo-master/Virus/Xpaj/xpajB.exe
    .exe windows:5 windows x86 arch:x86

    1dca2dbd3757a754f369f518971d3efd


    Headers

    Imports

    Sections