General

  • Target
    3proxy-0.9.9-x64.zip
  • Size 1.8MB
  • Sample260821-cktg1seq7s
  • SHA256 7fbcbcef719a526e55a1a58380993312c1e5164c212df7033d67a768cac38c76
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

  • Untrusted Codesign Signers 7 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 3proxy-0.9.9-x64.zip
    .zip 1.8MB
  • 3proxy/3proxy.crt
    1KB
  • 3proxy/README.md
    12KB
  • 3proxy/authors
    61B
  • 3proxy/bin64/3proxy.exe
    .exe 1.5MB
  • 3proxy/bin64/3proxy_crypt.exe
    .exe 831KB
  • 3proxy/bin64/FilePlugin.dll
    .dll 159KB
  • 3proxy/bin64/StringsPlugin.dll
    .dll 156KB
  • 3proxy/bin64/TrafficPlugin.dll
    .dll 157KB
  • 3proxy/bin64/WindowsAuthentication.dll
    .dll 147KB
  • 3proxy/bin64/utf8tocp1251.dll
    .dll 108KB
  • 3proxy/cfg/0.scenario.txt
    616B
  • 3proxy/cfg/3proxy.cfg.sample
    .sh 7KB
  • 3proxy/cfg/counters.sample
    1KB
  • 3proxy/cfg/sql/3proxy.cfg.sample
    1KB
  • 3proxy/cfg/sql/create.sql
    2KB
  • 3proxy/cfg/sql/report.xls
    .xls 56KB
  • 3proxy/copying
    2KB
  • 3proxy/doc/html/devel/devref.html
    .html 19KB
  • 3proxy/doc/html/faqe.html
    47B
  • 3proxy/doc/html/faqr.html
    48B
  • 3proxy/doc/html/highload.html
    32KB
  • 3proxy/doc/html/howtoe.html
    69KB
  • 3proxy/doc/html/howtor.html
    128KB
  • 3proxy/doc/html/index.html
    .html 971B
  • 3proxy/doc/html/man5/3proxy.cfg.5.html
    60KB
  • 3proxy/doc/html/man8/3proxy.8.html
    6KB
  • 3proxy/doc/html/man8/3proxy_crypt.8.html
    3KB
  • 3proxy/doc/html/man8/ftppr.8.html
    6KB
  • 3proxy/doc/html/man8/imapp.8.html
    7KB
  • 3proxy/doc/html/man8/pop3p.8.html
    7KB
  • 3proxy/doc/html/man8/proxy.8.html
    6KB
  • 3proxy/doc/html/man8/smtpp.8.html
    7KB
  • 3proxy/doc/html/man8/socks.8.html
    7KB
  • 3proxy/doc/html/man8/tcppm.8.html
    5KB
  • 3proxy/doc/html/man8/tlspr.8.html
    8KB
  • 3proxy/doc/html/man8/udppm.8.html
    5KB
  • 3proxy/doc/html/plugins/StringsPlugin.html
    569B
  • 3proxy/doc/html/plugins/StringsPlugin.ru.html
    909B
  • 3proxy/doc/html/plugins/TrafficPlugin.html
    2KB
  • 3proxy/doc/html/plugins/TrafficPlugin.ru.html
    4KB
  • 3proxy/doc/html/plugins/TransparentPlugin.html
    1KB
  • 3proxy/doc/html/plugins/TransparentPlugin.ru.html
    1KB
  • 3proxy/doc/html/plugins/WindowsAuthentication.html
    1KB
  • 3proxy/doc/html/plugins/WindowsAuthentication.ru.html
    2KB
  • 3proxy/doc/html/securityen.html
    3KB
  • 3proxy/doc/ru/3proxy_for_dummies.rtf
    .rtf 1.4MB
  • 3proxy/doc/ru/example1.txt
    6KB
  • 3proxy/doc/ru/iodbc.txt
    3KB
  • 3proxy/doc/ru/odbc.txt
    1KB
  • 3proxy/rus.3ps
    8KB

3proxy-0.9.9-x64.zip

  • SHA256 7fbcbcef719a526e55a1a58380993312c1e5164c212df7033d67a768cac38c76
  • MD5 SHA1 SHA512 SSDEEP TLSH