General

  • Target
    everything-software-windows-5.37.8.zip
  • Size 133.0MB
  • Sample260723-hbtpbasfpg
  • SHA256 02a95012756ab2a822052e432c310114404132ef959f0fa88f5fea6e8e46becd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • everything-software-windows-5.37.8.zip
    .zip 133.0MB
  • DynamicLoader.dll
    95.8MB
  • Inn_Agreement.txt
    6KB
  • OrionHandler.dll
    27.3MB
  • everything-software-windows-5.37.8.exe
    .exe 22KB
  • github-about.png
    .png 22KB
  • github-config.com.txt
    20B
  • msvcp140.dll
    .dll 540KB
  • ucrtbase.dll
    .dll 1.3MB
  • vcruntime140.dll
    .dll 120KB
  • vcruntime140_1.dll
    .dll 46KB
  • vsdbg.dll
    .dll 2.7MB
  • vsdebugeng.dll
    .dll 3.6MB
  • webservices.dll
    .dll 1.4MB

everything-software-windows-5.37.8.zip

  • SHA256 02a95012756ab2a822052e432c310114404132ef959f0fa88f5fea6e8e46becd
  • MD5 SHA1 SHA512 SSDEEP TLSH