S2MM_v33.zip
- SHA256 b5ae3ce0e832a06e5f3e3b2fc6e168a64f8e8a24051db6cea45bd25b1a76cdc7
Static task
static1
1 signatures
General
- Target S2MM_v33.zip
- Size 3.5MB
- Sample260525-fzf21sbs8j
- SHA256 b5ae3ce0e832a06e5f3e3b2fc6e168a64f8e8a24051db6cea45bd25b1a76cdc7
- MD5 83e9d16827456bb8449d7e088149874c
- SHA1 a0e2eb0ff0848b87d28f406d5a3ecba0e906e3ee
- SHA512 5c38396c0a6d16594ac1eb7144cbfa189aea153ff29ac413cdd5ae42ff0315c88e6e084facafe2c2daf862c0485e44b42ea7fb3351a5be836646335b7025b75d
- SSDEEP 49152:gJgugYgC4icpbeRjPp/KpZnUOFYiKUsSCPeh9d2y9+olqUcZ3PwhEYFEpSnJQcaW:gV2C4/I1PgfYivWKd13uwaTAJdyAy+7
- TLSH T1A7F533A70FFCF1B9CBA44204E7760EAC8751E0F46E551A0939D074C6DDE02AE1D2F9A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/S2MM.exe
File Explorer
-
S2MM_v33.zip.zip 3.5MB
-
S2MM.exe.exe 213KB
-
_filestructure/logs/_keep.txt68B
-
_filestructure\assets\github.png.png 11KB
-
_filestructure\assets\icon_main.ico103KB
-
_filestructure\assets\icon_main.png.png 622KB
-
_filestructure\assets\icon_sn2_settings.png.png 271KB
-
_filestructure\assets\icon_ue4ss.png.png 161KB
-
_filestructure\assets\link.png.png 10KB
-
_filestructure\assets\nexus.jpg.jpg 23KB
-
_filestructure\assets\nexus_logo.png.png 146KB
-
_filestructure\assets\pin.png.png 7KB
-
_filestructure\assets\reaper.png.png 944KB
-
_filestructure\assets\s2mm.png.png 12KB
-
_filestructure\assets\settings.png.png 14KB
-
_filestructure\assets\sn2.png.png 8KB
-
_filestructure\assets\ue4ss.png.png 11KB
-
_filestructure\assets\void_peeper.png.png 908KB
-
_filestructure\assets\void_peeper_square.png.png 191KB
-
_filestructure\config.json158B
-
_filestructure\modlist.json373B
-
_filestructure\mods\_keep.txt68B
S2MM.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 2bcebaa471a417632d550b63b9361f3a237b4002612b5262cc5dcfdf25db1893
- MD5 61508f754ac40b801cfaecde213780d1
- SHA1 3113f90d5d65385f304b030233d6f9d4a4f91487
- SHA512 7c650c8259d92cc313c15df68d6369698ff5a2a70976a72c02be754974020fa38b0a6a34cfcca9e6acba683114c850b987c9e3f9faf57f3947724f0cbd8397bf
- SSDEEP 3072:Qk5pTSgQTltTsL/Sxu64ZSDrbwkgSm9HEzqlQdzAibtwN8D2olTIZn8HqgkDCCm:LvGTltTsLkxcGmF+2Qd1tlLlU6Kg
- TLSH T13324AE8437DD4E16E7BF8FBAB4B111054A3ABCA79A32D74E08C255EA0C727C58510BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
117406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
107KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
105KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
_filestructure/logs/_keep.txt
- SHA256 572ed582ee566f008ad389fe31777b9744600000ff0da6b7b1eed86f976cd66f
- MD5 d8ae297943a654927fd76a6e15d135f1
- SHA1 c94e17f52204f9b1345571e0f3abaccdfba174bf
- SHA512 09319e050447cbbfb6aec58fa367508ef06f6b0c6ad3824487b700d37d163bbb0d7478e0412431837cd245176fb4328ae3da817cbb5e5ac21ffa54cc19a22f9b
- TLSH T199A0220A023B323308A8200FB20C20CC0002CC22330A080020C8003C0330A22F00C8E2
- MD5 SHA1 SHA512 TLSH
_filestructure\assets\github.png
- SHA256 e0d48ec77d26c9ff9a849331660868bf1682aeb3785fd781810f2bc32c420b42
- MD5 1512c2b053561800837fdacc2bba15e7
- SHA1 e94739bbdff18be2828f0e8bc5ac8f20fbd26b2b
- SHA512 a1bbe3f0a8c6ab8bb6af4b9af85b86bd55d3b57d66ace69be0913a51cc20c60636e886fb42528d1af419d653faf8f722fc6767d4e08f10ebfd2889e63fbbc339
- SSDEEP 192:nL/TN1hbduuileA/4RhkGbj9Mz/modoGx18lerFhkyrhwRTlzcYzSEL0xfai3oIb:Lr3hXBekqGbGzuodoggKFhXtwplYJELw
- TLSH T14D32C035EA70B4ACE94D2D07FB80FF6973A7FAD057674304985C23A408D1E6C069E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\icon_main.ico
- SHA256 4d7a4dd1d2e0c61af4e6bbe65bf0a6c5f92986024eb58663544c2473dab65255
- MD5 f55a39d8c93a3524e22a97ad190d161f
- SHA1 00ccea443b287e7b85f61c5d82fbe65a5c9d180e
- SHA512 d86bdf9e328531a052326a875be74b5224eb152dd3de64aa74141fcd4619c5b47e60af0e51c3ad73778ef73820b27ef17bdacb731fd71ec969d7e567c039619f
- SSDEEP 3072:i4EzKlQdzwibtwN8D2olTIZn8HqgkDCCmt:h+WQdltlLlU6KgN
- TLSH T1FBA3125F878519AECB0E8074AEEB3552E54398FEFD6916C754AC5F309C09DCE00A19D8
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\icon_main.png
- SHA256 d402c05132cdfd0571a50fdc3731bc6f43df73b9a058d39f2d76a2acb072f67c
- MD5 e754283271a3d33a2f169c93eba0b037
- SHA1 c5dfeed5d66420f9b536529edc5e0d12423d5d1e
- SHA512 966f29edd4f027143525d9554e8197f6890e78fc15ecbe48a3e5f347ac23630b22911e4a5566b18f48fe650f64c510588e24e8ca95f4285819d0481513a495ac
- SSDEEP 12288:5KbkPnj367M2JcAt/xGIYpo/o3rqORNK9Jif04O0/lyWwXs00KwQh:SUn8vJtwrKgr9N6Jif0/0NyWwXj0Kxh
- TLSH T138D423B6DD68B89ADE54C478430F4C12231C50B6EF5580E1AE4F63AA0F086696E4F2B7
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\icon_sn2_settings.png
- SHA256 cd483e758677a373478818ac47f599d0091950cc7bca1df58ddec44d7c35d995
- MD5 57527f808a5993c548c14a0f0865c7e8
- SHA1 e4d4790cb937e3d2d3ea5b82feebd151a970a6ea
- SHA512 497707548ad906fd0907f3b201f8b583779a6c2f4ffe676043dd76903a97048cae095e50ff2b9c3d43bf6a700b8eb6074152e03001a3fea0ad11b5d75fdd09ad
- SSDEEP 6144:mcVibBnG+iKimvyy8fsSjH30Ysn14T5gjYKLPmu5xQgd:mmiE+ihMyy8ESjHkYsocmGQgd
- TLSH T1034413165E7D24F6E6DA3563B6A8098B0159FE106BAE3067C3D0E9F198E333D1CD03A4
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\icon_ue4ss.png
- SHA256 63ef680f735668df312faf56a2504fbf77b124a49e5ab118d0e559f5d75179b9
- MD5 326cbd1bf92c39475c82ca9fc7a04cf5
- SHA1 14032313abcbc19a4344281cacbfb5dd89a0a333
- SHA512 92367db0f49b2b11b31ee0c8b658a3fad949437daea776d08a98c4d31d7f896085b653c4dc1007bbcf642c924f5b9516e14ef29f374c781a967e57fed4cd94a8
- SSDEEP 3072:6P9G8ISk5HNnC3XTKeLNapInwYGBAzzbcZrMmE5bgH6cQuL9hJ4eqGmIwW:6VXKmNamnwY5zIZwD5ro9h6eVMW
- TLSH T174F312866575B02FC1EA9890B757C74AB37668CBDD36DB1A51233E687B30304AD35D0C
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\link.png
- SHA256 dca3f42adf34707cb9f23320aa6f649c708d9c7bf761e014a5b45470418b3dfc
- MD5 afca8fbf3d162954516aed971529f126
- SHA1 cd76b42b86b04193b7d93aaf6f7cfa18406783d5
- SHA512 c47bf8517862219f5d75b6243d1e0d274eda498b3d39fd993a54e4bae8d5538cb3b3fe67fbe632e8797fa3db8858023e15af5241bbcde451969f90dc10335997
- SSDEEP 192:K9TyadnsrXXnjnBkfTaHC2wiPEg8rpHQRJblkYhYRhACelBy/+9Flov:K9TRdsrHzuaHC2Cg8QRPqhvW9Qv
- TLSH T1F622BFEF240A92EC3CA50E55830239372138214A9CA1E59C371B4F66B3F8F754CA5AD5
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\nexus.jpg
- SHA256 917c5a1996ac8a4ed3a4968fb7875ca9c730df99105c19f59042ccce6c2365db
- MD5 73644906fbbf3cbd1cd62969361dd33b
- SHA1 2683490b6c8c9d2bc79560917721e3b37e085147
- SHA512 6e335bf5fc65e34cdc1d6ba0980432c50a50edac7e577f3e93567f837e5f496a732152e9d1569daa91bf7edb2efa19b5e9d16363075df5718ac56212271d4d61
- SSDEEP 384:NMPxHx+Lvw/c/tg/BLQRME8N80MbS1WOe+ViLnEFDafmPDgWAY4tf:GZ/Og/UT8NHMbUeMizMbPDgWAYgf
- TLSH T104B2D066836A8861D8F6973585C75334FF3BAE649016930BB83C1A797C02B91FF0C5E5
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\nexus_logo.png
- SHA256 9c53607b550800c0dfe8483eceb511e3bffe6d75a6cdf8cea6333e27acc03da4
- MD5 5ad1f30b62decbaa85fb3ada96b12fa6
- SHA1 2c5e31cdfdaea30b0fb8579e3bd7224aaa13c90b
- SHA512 5e949d29728c4c0e8732c811191f30784eef00ac428e5ebf2e7d8f559838da3f18103f25c62359496a46a9b6288ce8a944f949ce81165beaf30044b56121e40e
- SSDEEP 3072:4T5mKUSsI0ljs6/AaQgMObgz0heqIMyStoXk6Dq:4TUosI0ljWaQgPcgXZ56Dq
- TLSH T1F8E3129060D6F0A1F5C7A73014B9573F329F1E952EECC03B1929A066ECFF09747981A2
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\pin.png
- SHA256 c3adb4b795723c20d58c54c7b2c741408ffc93740d0ddf7fe13c9cdead9ded72
- MD5 9258d6e28fee83579339cb807af31fb2
- SHA1 a6558449ec67c182690313ae9de9efe2b9adb996
- SHA512 aeb56acc7528b07cab3f87155aaec78156a9816f039c981ca131ac6ba021deaa62b527beb81cff1394ed7b4e424ceef6a58b7ffdae2c68319d78bd9c876b3f83
- SSDEEP 192:RIovrytXt0UsnghWDzDUWjG1iOhLFe3qHrP2DCmIFN3Li:Rprytd0UsnjDu1Fe3qHSDCDNbi
- TLSH T15AF19FE163CBAC63BF338830040415EB951D12ADD1628DDE158AEAEB8DC95D4998BF43
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\reaper.png
- SHA256 a50432faabc9c4ada2b2de474874ecae25eaa2d3280fee142a28f6518b6ad482
- MD5 49c8b187964a69db7c0d6ec5908deeee
- SHA1 ff5739fbd489e76343893ea0036f8cd09a66a039
- SHA512 d16a02d03fd2deed70862c539e5c4eb4cca455f5ddfe703e92c6e201cb9c78ee2609b051756af3f7beece76ae6f73f79e10ec5a5da7191937d773193fa6f0d54
- SSDEEP 24576:gZTbvD3IqcjDFgxmbJIGvNlXSstQh6uYKE/qvvXfS:iLD3iFgxmbfvmst2iqK
- TLSH T1F225339997F7DB9E9E8B013A8F586F738013F9A8D2C8241BC4B44A1E45F0E31953E715
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\s2mm.png
- SHA256 fedb6c95621a16468713e04de8c8591961fdf1ca51f1d230fcc483a196df59b6
- MD5 2584a73f60dc99d245f4e2683282547c
- SHA1 8f172bd01142494b044c1c5a88dec4d633e180d4
- SHA512 6c7f03477571286b3f06407a985f5100f8783361075900404248fd3ceba6d70f2485e6ae20ebf1e322a35bb08395a3d0255b4109ea975fb5f4185f260be1c0da
- SSDEEP 384:Jggi37/TiB2qsUdwaaW56STTJ72pGy64jM:6gS7GsUdRvJTJKw94A
- TLSH T10352BF8890E6A9D2C5AE03A329462454FE47F50225ADBE3C224BB65178FD60173DFEDC
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\settings.png
- SHA256 03073d65e1883654264eb5b0afb285eca7bcbba5d7ba4651b67751eb5b1c7108
- MD5 c2dce094e307ab3612fad05ce6523b79
- SHA1 e59d52ce4c9c6c2446b259a78559e8849e0d19ce
- SHA512 2dd41dc481be4acfae61341de25fbf2c6b8a85337021b42557371736257901ea0b98f32673ca7da381e4f186ae72d037ec5cd97fffcdbc29e2bf8b3a05498ba2
- SSDEEP 384:yoTrz0SUyeEmW6s/hAGLVn/qtif55H2ZOut90OLsyReEfV:yoTrz0DEPn/hAg9qAB8ZO20OLeEfV
- TLSH T18562C0C4DA3154B1BB9C69E66FEFA907EC3D1566299300251E07D02A7FBCD62222A235
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\sn2.png
- SHA256 1849f37dc7415f93122547ace80dc0988549f4c4ee5479b2dac1543f51de3288
- MD5 7787eefa97d8dd77c5120b3e6330147b
- SHA1 3d00bdb408948352b5faab09c36a920e55aa6aeb
- SHA512 99c418e6141f773819302340059bd71056de4e7a42602307375be8f621220d98b0a39ab287f15e35dbe637e0f44f16c7ece86522d7eb62bde8a5e96f56b79008
- SSDEEP 192:gBqK28eIhLmJ97VJ+g+W3ag0/+h/eaOymNTCVpShuP5kg:3xyZi+JtL+pDg2pcuP57
- TLSH T18C02AE9A5E52577EC417A8340BF0D3E47C2E13A627313D5A22C0FDFC36A06628C28730
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\ue4ss.png
- SHA256 51065c66c5b6dca4bdb8a6b8d4c36be0369169fff5a849fa93a57ff7122509cf
- MD5 52bc26377380d83b4ce46632f1e59360
- SHA1 fb68ad707de12f9a8499175d57f1feadd44d4e40
- SHA512 b6dd01f3df3615529a6290813b587942cc0ed1ed507544d55c0bfa89b2b192bc072f17528be447f220bc44c18ab301d2ef2b3b1156dc19a376407f44e1ff6616
- SSDEEP 192:j6B9Q0RGNFHOlVqqw3GLqj4cC+Kynyo38hI/uA3exx3PHrm5kBIr3:Kp2xO2ibcC7ynVaI/xexx/Hrm5og3
- TLSH T1EC32BFD50B9BC60EC61CD480BC600F88DCBE748252BC77E59BA8E304B3F5689EA71532
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\void_peeper.png
- SHA256 7429112949aea9ad27ec4f58584748caa02852dde4512db268f2d7fe3b4963bd
- MD5 2dd2a8a324a98a8a741a7e1630d955c7
- SHA1 b8cd24ee6676b87f394612ee6ebad17be4ca1f2e
- SHA512 662a2d724b41368826a91c13febad5cea6c51b4cc2d90ff071e1f8463cd4310a2dae1f4c3d34edc72ba44e011c1805cd79b83287d82e14e975477eed161f0dc3
- SSDEEP 12288:EPshMr1ohgqLF9aWC7E52yi3Y/1RrsDX5PTFLgMnZy9Da6A22dVDnmE1noHWPMHQ:aDZOgquWC7jS1VsD5PyOy9NOplBbT3ZT
- TLSH T1D81523798EB7CAD0EECF2B38D7AC62A402A507472947A4741537A4FCCF90EB7190095B
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\assets\void_peeper_square.png
- SHA256 15c03eeab47bb610f40955dc6fe38918b91fe6f69c85cf0a0a5d26584a1c8a72
- MD5 ccb4283c27d8c3e802fdc8fd96d6b3bb
- SHA1 89cc978c29a9a34d41ce722f19542ab5251c13a5
- SHA512 43489cb1940ff13b5a7f820d104ec9cdbbc448427e7679fc04122e13cc0e35f47768278ed9214e060140b49001cb0917b7ba4e9cb49799a74a5f306a2aa518aa
- SSDEEP 3072:EsaVf1q83xGCu7hXM1UHz5sZcfPYeBKu6v1+HymL2gG93kRgRoLkZMa:onxK7B533BB2I+bWgqLVa
- TLSH T1181412B78E74B0ECC60B66EB373BC847DF49DF54522F8180A484AAEE094CDC796C9546
- MD5 SHA1 SHA512 SSDEEP TLSH
_filestructure\config.json
- SHA256 4d2626a30bf59c046114f2d8ca54fa2bfd065beff569ce4fc352a71e4f927862
- MD5 ad5fc0dbc57c7c817407d7c95c305600
- SHA1 455a6b6560bd9c99fddde03cd888f0bcb4aaec95
- SHA512 b4f20aa25c186b3312b0a123cbee8bdca6e37663dba265acca35bc00abb8b5123bef94daa5f487cf94d92b4dfc5318f93533ba4000adbab0c15ce4b77c45db44
- TLSH T168C0029BC61BAC342D24966128665383F604C39B5C24BE5AB2BC61CD4F3B154B5D1964
- MD5 SHA1 SHA512 TLSH
_filestructure\modlist.json
- SHA256 633733087a130e3d9eb3a0e82e7c6f04d2b8150f9855f66e025de95f8dd10d81
- MD5 500ca44113bcfa0d1883e514edcb3b80
- SHA1 ab5d4e7776e33bf424a23cdd085d475695f827e9
- SHA512 8f56c9083b1b0549f36d374b0ddd27fec852f48032db5fc6c8a3f993329c80af425fcacb2355a4c09753f20da43c9bd0ae929f8fcd7ed1985f26bd414ce16306
- TLSH T163E0B156822E4C2A56F13689ADC5880BD701420B18117AA63ABD4A0C1F3246A525BDED
- MD5 SHA1 SHA512 TLSH
_filestructure\mods\_keep.txt
- SHA256 572ed582ee566f008ad389fe31777b9744600000ff0da6b7b1eed86f976cd66f
- MD5 d8ae297943a654927fd76a6e15d135f1
- SHA1 c94e17f52204f9b1345571e0f3abaccdfba174bf
- SHA512 09319e050447cbbfb6aec58fa367508ef06f6b0c6ad3824487b700d37d163bbb0d7478e0412431837cd245176fb4328ae3da817cbb5e5ac21ffa54cc19a22f9b
- TLSH T199A0220A023B323308A8200FB20C20CC0002CC22330A080020C8003C0330A22F00C8E2
- MD5 SHA1 SHA512 TLSH