Guns[.]lol viewbot[.]zip

General

Target
Guns.lol viewbot.zip
Size 71.0MB
Sample260806-28c8dack3v
SHA256 63d3149d81cb17fffc1b92d9d5fb81f78b323c1f7c132fdb672cd0e9f10e7acb
MD5 e74b275862f4a70c3057f6ca6e9b421f
SHA1 c261e964da55dd0337905c9b845d662cfc560822
SHA512 726ec6ca24f4591681b44d72ef748e0263c18ae6c4a4ebf9ead333d040bcfef43bf702ef07e18c35bb5321e0230850603d5b84372f1957559e97743d3c138326
SSDEEP 1572864:sBhId0JDRnug99NX6Cgi1PVM/58ManA0UdSgqTDai:sBh5JD8g99NX6Cg+SR8NUMgqvd
TLSH
T102F733B97309DC44B90459AB864F253F890DFA532FC8C2DD901D87F233E2E2967625AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot.exe

File Explorer

Guns.lol viewbot.zip

.zip 71.0MB
Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot.exe

.exe 71.0MB
Guns.lol viewbot/Guns.lol viewbot/README.TXT

562B

Guns.lol viewbot.zip

SHA256 63d3149d81cb17fffc1b92d9d5fb81f78b323c1f7c132fdb672cd0e9f10e7acb
MD5 e74b275862f4a70c3057f6ca6e9b421f
SHA1 c261e964da55dd0337905c9b845d662cfc560822
SHA512 726ec6ca24f4591681b44d72ef748e0263c18ae6c4a4ebf9ead333d040bcfef43bf702ef07e18c35bb5321e0230850603d5b84372f1957559e97743d3c138326
SSDEEP 1572864:sBhId0JDRnug99NX6Cgi1PVM/58ManA0UdSgqTDai:sBh5JD8g99NX6Cg+SR8NUMgqvd
TLSH
T102F733B97309DC44B90459AB864F253F890DFA532FC8C2DD901D87F233E2E2967625AD
MD5 SHA1 SHA512 SSDEEP TLSH

Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot.exe

IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
SHA256 43cbb951d6f30351b22977eb5b0a9a2e2df44e4f9f7bd19fde5792ae74e8423e
MD5 55abaef12f7ad08e053c1d81a1c80c51
SHA1 1575fc0b0fbf666ea74b14a3975a77e92d1df251
SHA512 5360a507e8f60ac64e3ce0695cb6d17b5498596e09b30ff477a49656cb30e2021517454d93f8143f5ff6bb6a7ed41e75229bcbc1850b789b79749d79720c6f01
SSDEEP 1572864:877IhCyt/tmo97nBack+bZHIfV2OGVCUe5QEOMPk:877NytMo97nBack42N2jemEO6
TLSH
T189F733B57309D840F50489BE854F243F8A09BA265FEC969DD05988F633E2A2937735FC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5237

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Guns.lol viewbot.zip

Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot.exe

msvcrt

shell32

kernel32

generic

Guns.lol viewbot/Guns.lol viewbot/README.TXT

Sharing

General

Malware Config

Signatures

File Explorer

Guns.lol viewbot.zip

Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot.exe

msvcrt

shell32

kernel32

generic

Guns.lol viewbot/Guns.lol viewbot/README.TXT