General

  • Target
    everything-software-windows-9.79.7.zip
  • Size 120.7MB
  • Sample260813-3vsxca1bqd
  • SHA256 bf6415348c7e6379ce496c391a6819b3ec16e983f8de0ba9d701384074292540
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • everything-software-windows-9.79.7.zip
    .zip 120.7MB
  • Inn_Agreement.txt
    6KB
  • OmegaValidator.dll
    26.1MB
  • QuantumCore.dll
    84.9MB
  • everything-software-windows-9.79.7.exe
    .exe 22KB
  • github-about.png
    .png 22KB
  • github-config.com.txt
    20B
  • vsdbg.dll
    .dll 4.6MB
  • vsdebugeng.dll
    .dll 3.6MB
  • webservices.dll
    .dll 1.4MB

everything-software-windows-9.79.7.zip

  • SHA256 bf6415348c7e6379ce496c391a6819b3ec16e983f8de0ba9d701384074292540
  • MD5 SHA1 SHA512 SSDEEP TLSH