proxychecker.rar
- SHA256 cec84fa1affd37d50cfbe050be44f8758ddf7946018aca069d52ec0c72ca2cb6
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Colorful.Console.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Colorful.Console.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
ProxyChecker.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
ProxyChecker.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
xNet-Ameliorated.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
xNet-Ameliorated.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target proxychecker.rar
- Size 65KB
- Sample260912-plg7labf92
- SHA256 cec84fa1affd37d50cfbe050be44f8758ddf7946018aca069d52ec0c72ca2cb6
- MD5 feeb0c0336d7f06a7267bda7cf59f2dc
- SHA1 1de43400c577a09e6ebbe2aa09cf6f12b17b0e84
- SHA512 6191292837f4d94013ca3748994b48afaf293359b277b19e8c71bc30befe184e7fdd6b4fd6ce1338d4e8887761673dba0e47ce6649e1e484d5036fbd91bd4987
- SSDEEP 1536:wIK0u6D9Wstwdcd9mvopmfbc4kPiuWwKUrxbRTM/5o:w0u6DQzdcd0I4uipIbRv
- TLSH T12653F28D22BF045D365B1129F33D6798D2848B5BEC6A98A1B30F7F76E701EE842584C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Colorful.Console.dll unpack001/ProxyChecker.exe unpack001/xNet-Ameliorated.dll
File Explorer
-
proxychecker.rar.rar 65KB
-
Colorful.Console.dll.dll 88KB
-
ProxyChecker.exe.exe 17KB
-
Sources.txt5KB
-
xNet-Ameliorated.dll.dll 74KB
Colorful.Console.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f31d4fd7e729fc6cf4ecab972b6b1ee897918a325b1ca572030966f831e768fb
- MD5 5f3d2cfbc21591b8feef1efa3e59a4d0
- SHA1 15d1ad963a13b6c8ae28c26e7dc1cc3da2bc3bb8
- SHA512 05135188c3b75cf642e4e1e833d01c24d2ce2c2b1ae71b0edf048e453a4716226d7af582365d2f6ab803b4b0fe83ce67d4c39125963fc50d597c30e56ae74a2f
- SSDEEP 1536:hLeJYLqthWMjfBiRlijZFgWHdQe9nLClbWG:hxLqtQMv7d9nLqCG
- TLSH T13393A3181BD761D0F5BA967F99879D4AC327A2E14133A36F92FC21D24FC730409E13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
96090
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb
mscoree
_CorDllMain
Name
.text
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ProxyChecker.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 bd939a75151715536dccde6471b64a0ab6436184bd5ff4f3d89fce976a1f5561
- MD5 5124f28ec4d487207b9ce6362c7b0d9b
- SHA1 6fdee551cca4898c77d7ad91519b977b229b2317
- SHA512 fb729549e62a4ebe67113cff6c28b24b22b3a326076e57073639ca0f57435b5c8d76e8b9e1c6ba0f75307011568ec78d9446b905a508ec1715059217388eced2
- SSDEEP 384:kLRaVeNRqcSJAdDv27sZQ5XD2EBnJSnKr8l1IKZa5Cc1G:kLFNRqvqOsZQ5XLBnJSn28lZU5Cc1G
- TLSH T139728301BFEE4221F2BE6D7849BE49200B37B5874572CF0D2EA150475A6BBB08F94F56
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Sources.txt
- SHA256 2c3caa2f0053661462c5e2a6314bf06ec760172b259e18163404c9f55e1fd202
- MD5 2f692357b38201539efe2a00543101de
- SHA1 584c5ca0aebf3bb47bbb63ba86e481de82a93cc4
- SHA512 955ffd25194664473af04dfea4ad56a4e3f0a6f9b1e2721b8f032d2a19fd89f21d8fb3040d5ea5cf444ac322cb2cc0f98a20a6def72db475a450c96fba7dce2a
- SSDEEP 96:p7udurvHsFCATJnybtjUNTvMOCTfzrr9kKu:ZudurvMFRVi2DMr1kV
- TLSH T189B139FFC139D814CEBC99DE38FCBB8AFE36A48E9DD091D8C1508574AC4526E2D85684
- MD5 SHA1 SHA512 SSDEEP TLSH
xNet-Ameliorated.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 16ea0eab1ffe6b3b05abf1b04baa7c2695885795c5bfecb6cfcfa595a0fa7b30
- MD5 44d7396d8b6fbd8f1e9ff4d0278bb767
- SHA1 7c8dc050381d2e19b989943f961fee45bd225b69
- SHA512 320573c76b448b6f625917d26cec738c94431d274e340a9a0ac5401535a75faa9ebb65616fd23a069de39e4634baf79a67527eccf7bbd197e8f3cb823ec4d93c
- SSDEEP 1536:CpGjP8+k8PDYivFAS537WYRwFH1+KZ3etqp:CpwJgYAScYRwFH1+KZ3etqp
- TLSH T1967318142BF84316E1BEBBB5A4B0021003757549B63AEB1E5D90A4EF2DB37918D21FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
82062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\SEEZORR\Desktop\xNet-Ameliorated-master\xNet-Ameliorated\xNet-Ameliorated\obj\Debug\xNet-Ameliorated.pdb
mscoree
_CorDllMain
Name
.text
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ