General

  • Target
    Ton-keeper-pro.rar
  • Size 1.2MB
  • Sample260809-n86ysszzfs
  • SHA256 bf5567566bf4928b79a571892dde421ca646bd402188a27a14933e5c66f75c18
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Ton-keeper-pro.rar
    .rar 1.2MB
  • Ton-keeper-pro/VCRUNTIME140.dll
    .dll 83KB
  • Ton-keeper-pro/VCRUNTIME140_1.dll
    .dll 48KB
  • Ton-keeper-pro/glib-2.0.dll
    .dll 1.2MB
  • Ton-keeper-pro/gmodule-2.0.dll
    .dll 29KB
  • Ton-keeper-pro/gobject-2.0.dll
    .dll 293KB
  • Ton-keeper-pro/intl.dll
    .dll 109KB
  • Ton-keeper-pro/pcre.dll
    .dll 402KB
  • Ton-keeper-pro/tonkeeper.exe
    .exe 108KB
  • Ton-keeper-pro/vmtools.dll
    .dll 867KB

Ton-keeper-pro.rar

  • SHA256 bf5567566bf4928b79a571892dde421ca646bd402188a27a14933e5c66f75c18
  • MD5 SHA1 SHA512 SSDEEP TLSH