Guns[.]lol viewbot[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Guns.lol viewbot.zip
Size 71.0MB
Sample260830-2sgkvs1gnd
SHA256 fb51773f5483122bcd41514dcfbc1e193c9a1bb9f3c58e65511fe72340325ea4
MD5 9cb57765a19cc59045305b8773f71ae7
SHA1 7f5520468efb6b47971d150af98c72f4e35efff0
SHA512 ec26479a4f6a6b0b93b2e7a483a1c10155d0eac6daf56cec22e3d59b0595197e68b5bb471a8ec8d0975697933444a87c439a1436ab762676cace375616379bde
SSDEEP 1572864:J0IwT62Oejptj4PhYqEMnfvWuPUI4MAXhFhaqMUM1dima6:XCvtjuTlnfvWyARFYfPdimL
TLSH
T1CCF733B801CAFE947C1648731AD8F4DAC538CB4F82539B1D6F60AF42D672B91B65206F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot 2.34.exe

File Explorer

Guns.lol viewbot.zip

.zip 71.0MB
Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot 2.34.exe

.exe 71.0MB
Guns.lol viewbot/Guns.lol viewbot/readme.txt

305B

Guns.lol viewbot.zip

SHA256 fb51773f5483122bcd41514dcfbc1e193c9a1bb9f3c58e65511fe72340325ea4
MD5 9cb57765a19cc59045305b8773f71ae7
SHA1 7f5520468efb6b47971d150af98c72f4e35efff0
SHA512 ec26479a4f6a6b0b93b2e7a483a1c10155d0eac6daf56cec22e3d59b0595197e68b5bb471a8ec8d0975697933444a87c439a1436ab762676cace375616379bde
SSDEEP 1572864:J0IwT62Oejptj4PhYqEMnfvWuPUI4MAXhFhaqMUM1dima6:XCvtjuTlnfvWyARFYfPdimL
TLSH
T1CCF733B801CAFE947C1648731AD8F4DAC538CB4F82539B1D6F60AF42D672B91B65206F
MD5 SHA1 SHA512 SSDEEP TLSH

Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot 2.34.exe

IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
SHA256 e710c578b7c63c76ced706dfbc4fe4c4d5b75bcde9b15943095a7266abec697d
MD5 9707da370a6e655dcaf2aae722eadede
SHA1 c28dca97d7a55bf94d50cdff640c7ca0f60dc07f
SHA512 2d18e719acbaeab554fed5cf7eedfdf4ad8474e136bd3ad26d4e9593a1063f039de1b26cb285a8e2db817dd711fc8ae59f13d6a945ec5c3b8317772a1bd30556
SSDEEP 1572864:gEigCtE+Ws9EgvCt/s2yQJrfMS7MsCYU515ZU0uiG1Hms8:ggIygv2fBJrfMGUz5uV1Hms
TLSH
T15CF733A800EBBAD5FC1A987349D5F0CF8634D60F81539B197E709E8692717D1FA8206F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5237

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Guns.lol viewbot.zip

Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot 2.34.exe

msvcrt

shell32

kernel32

generic

Guns.lol viewbot/Guns.lol viewbot/readme.txt