General

  • Target
    f3c7867d69abb5b26dd35f79839808d4230180937a3104a02abe1d3d0df79c0c
  • Size 4.8MB
  • Sample261001-mpk2jsad86
  • SHA256 f3c7867d69abb5b26dd35f79839808d4230180937a3104a02abe1d3d0df79c0c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • f3c7867d69abb5b26dd35f79839808d4230180937a3104a02abe1d3d0df79c0c
    .zip 4.8MB
  • launcher_0827ac37761b48068b2d0453028b8cd0\GregatorDemon.exe
    .exe 568KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\VCRUNTIME140.dll
    .dll 87KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\_brotli.cp37-win_amd64.pyd
    .dll 801KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\_bz2.pyd
    .dll 87KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\_ctypes.pyd
    .dll 130KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\_hashlib.pyd
    .dll 38KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\_lzma.pyd
    .dll 251KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\_queue.pyd
    .dll 27KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\_socket.pyd
    .dll .js 74KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\_ssl.pyd
    .dll 120KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\certifi\__init__.pyc
    287B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\certifi\core.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\__init__.pyc
    803B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\api.pyc
    9KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\assets\__init__.pyc
    7KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\cd.pyc
    7KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\constant.pyc
    13KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\legacy.pyc
    2KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\md.pyc
    13KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\models.pyc
    10KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\utils.pyc
    7KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\version.pyc
    237B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\collections\__init__.pyc
    45KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\collections\abc.pyc
    222B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\ctypes\__init__.pyc
    13KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\ctypes\_endian.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\__init__.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\_encoded_words.pyc
    3KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\_parseaddr.pyc
    9KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\_policybase.pyc
    5KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\base64mime.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\charset.pyc
    5KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\encoders.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\errors.pyc
    4KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\feedparser.pyc
    8KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\header.pyc
    10KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\iterators.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\message.pyc
    20KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\parser.pyc
    2KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\quoprimime.pyc
    4KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\email\utils.pyc
    6KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\encodings\__init__.pyc
    3KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\encodings\aliases.pyc
    6KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\encodings\latin_1.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\encodings\utf_8.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\http\__init__.pyc
    5KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\http\client.pyc
    24KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\http\cookiejar.pyc
    36KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\http\cookies.pyc
    .js 10KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\importlib\__init__.pyc
    3KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\importlib\abc.pyc
    13KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\importlib\machinery.pyc
    989B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\importlib\resources.pyc
    6KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\importlib\util.pyc
    6KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\json\__init__.pyc
    2KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\json\decoder.pyc
    5KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\json\encoder.pyc
    6KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\json\scanner.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\libcrypto-1_1-x64.dll
    .dll 2.4MB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\library.zip
    .zip 732KB
  • BUILD_CONSTANTS.pyc
    333B
  • Brotli-1.1.0.dist-info/INSTALLER
    4B
  • Brotli-1.1.0.dist-info/LICENSE
    1KB
  • Brotli-1.1.0.dist-info/METADATA
    5KB
  • Brotli-1.1.0.dist-info/RECORD
    751B
  • Brotli-1.1.0.dist-info/WHEEL
    101B
  • Brotli-1.1.0.dist-info/top_level.txt
    15B
  • __future__.pyc
    2KB
  • __startup__.pyc
    2KB
  • _bootlocale.pyc
    1KB
  • _collections_abc.pyc
    28KB
  • _compat_pickle.pyc
    5KB
  • _compression.pyc
    4KB
  • _dummy_thread.pyc
    2KB
  • _py_abc.pyc
    4KB
  • _strptime.pyc
    15KB
  • _threading_local.pyc
    6KB
  • _weakrefset.pyc
    7KB
  • abc.pyc
    6KB
  • aggregatorhost__init__.pyc
    463B
  • aifc.pyc
    20KB
  • base64.pyc
    16KB
  • bisect.pyc
    1KB
  • brotli.pyc
    596B
  • bz2.pyc
    10KB
  • calendar.pyc
    26KB
  • certifi-2025.8.3.dist-info/INSTALLER
    4B
  • certifi-2025.8.3.dist-info/METADATA
    2KB
  • certifi-2025.8.3.dist-info/RECORD
    1014B
  • certifi-2025.8.3.dist-info/WHEEL
    91B
  • certifi-2025.8.3.dist-info/top_level.txt
    8B
  • charset_normalizer-2.0.12.dist-info/INSTALLER
    4B
  • charset_normalizer-2.0.12.dist-info/LICENSE
    1KB
  • charset_normalizer-2.0.12.dist-info/METADATA
    11KB
  • charset_normalizer-2.0.12.dist-info/RECORD
    2KB
  • charset_normalizer-2.0.12.dist-info/WHEEL
    92B
  • charset_normalizer-2.0.12.dist-info/entry_points.txt
    77B
  • charset_normalizer-2.0.12.dist-info/top_level.txt
    19B
  • chunk.pyc
    2KB
  • codecs.pyc
    33KB
  • commctrl.pyc
    39KB
  • contextlib.pyc
    19KB
  • copy.pyc
    6KB
  • copyreg.pyc
    4KB
  • datetime.pyc
    55KB
  • dummy_threading.pyc
    768B
  • enum.pyc
    23KB
  • fnmatch.pyc
    3KB
  • ftplib.pyc
    .js 17KB
  • functools.pyc
    23KB
  • genericpath.pyc
    3KB
  • getpass.pyc
    2KB
  • gettext.pyc
    13KB
  • glob.pyc
    3KB
  • gzip.pyc
    13KB
  • hashlib.pyc
    5KB
  • heapq.pyc
    14KB
  • hmac.pyc
    3KB
  • idna-3.10.dist-info/INSTALLER
    4B
  • idna-3.10.dist-info/LICENSE.md
    1KB
  • idna-3.10.dist-info/METADATA
    9KB
  • idna-3.10.dist-info/RECORD
    1KB
  • idna-3.10.dist-info/WHEEL
    81B
  • imghdr.pyc
    3KB
  • io.pyc
    3KB
  • ipaddress.pyc
    36KB
  • keyword.pyc
    1KB
  • linecache.pyc
    3KB
  • locale.pyc
    33KB
  • lzma.pyc
    5KB
  • mimetypes.pyc
    9KB
  • netrc.pyc
    3KB
  • ntpath.pyc
    12KB
  • nturl2path.pyc
    1KB
  • operator.pyc
    13KB
  • optparse.pyc
    34KB
  • os.pyc
    29KB
  • pathlib.pyc
    33KB
  • pickle.pyc
    41KB
  • platform.pyc
    18KB
  • plistlib.pyc
    21KB
  • posixpath.pyc
    10KB
  • pprint.pyc
    15KB
  • py_compile.pyc
    3KB
  • pythoncom.pyc
    259B
  • pywintypes.pyc
    1KB
  • queue.pyc
    6KB
  • quopri.pyc
    5KB
  • random.pyc
    12KB
  • re.pyc
    13KB
  • reprlib.pyc
    5KB
  • requests-2.27.1.dist-info/INSTALLER
    4B
  • requests-2.27.1.dist-info/LICENSE
    9KB
  • requests-2.27.1.dist-info/METADATA
    4KB
  • requests-2.27.1.dist-info/RECORD
    2KB
  • requests-2.27.1.dist-info/WHEEL
    110B
  • requests-2.27.1.dist-info/top_level.txt
    9B
  • selectors.pyc
    16KB
  • shlex.pyc
    6KB
  • shutil.pyc
    19KB
  • signal.pyc
    2KB
  • sndhdr.pyc
    5KB
  • socket.pyc
    14KB
  • socketserver.pyc
    12KB
  • sre_compile.pyc
    14KB
  • sre_constants.pyc
    6KB
  • sre_parse.pyc
    20KB
  • ssl.pyc
    28KB
  • stat.pyc
    3KB
  • string.pyc
    7KB
  • stringprep.pyc
    9KB
  • struct.pyc
    351B
  • subprocess.pyc
    37KB
  • tarfile.pyc
    47KB
  • tempfile.pyc
    15KB
  • textwrap.pyc
    6KB
  • threading.pyc
    36KB
  • token.pyc
    3KB
  • tokenize.pyc
    17KB
  • traceback.pyc
    19KB
  • tracemalloc.pyc
    16KB
  • types.pyc
    8KB
  • typing.pyc
    48KB
  • typing/io.pyc
    1KB
  • urllib3-1.26.20.dist-info/INSTALLER
    4B
  • urllib3-1.26.20.dist-info/LICENSE.txt
    1KB
  • urllib3-1.26.20.dist-info/METADATA
    48KB
  • urllib3-1.26.20.dist-info/RECORD
    5KB
  • urllib3-1.26.20.dist-info/WHEEL
    109B
  • urllib3-1.26.20.dist-info/top_level.txt
    8B
  • uu.pyc
    3KB
  • vdf-3.4.dist-info/INSTALLER
    4B
  • vdf-3.4.dist-info/LICENSE
    1KB
  • vdf-3.4.dist-info/METADATA
    5KB
  • vdf-3.4.dist-info/RECORD
    833B
  • vdf-3.4.dist-info/WHEEL
    110B
  • vdf-3.4.dist-info/top_level.txt
    4B
  • vdf-3.4.dist-info/zip-safe
    1B
  • warnings.pyc
    13KB
  • wave.pyc
    11KB
  • weakref.pyc
    18KB
  • win32con.pyc
    126KB
  • win32traceutil.pyc
    917B
  • winerror.pyc
    107KB
  • zipfile.pyc
    42KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\libssl-1_1-x64.dll
    .dll 511KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\logging\__init__.pyc
    33KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\pywintypes37.dll
    .dll 129KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\requests\__init__.pyc
    2KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\requests\__version__.pyc
    538B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\requests\_internal_utils.pyc
    672B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\requests\certs.pyc
    258B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\requests\compat.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\requests\cookies.pyc
    11KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\requests\exceptions.pyc
    4KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\requests\structures.pyc
    3KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\requests\utils.pyc
    16KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\select.pyd
    .dll 26KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\unicodedata.pyd
    .dll 1.0MB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\__init__.pyc
    2KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\_collections.pyc
    8KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\_version.pyc
    197B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\connection.pyc
    10KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\connectionpool.pyc
    14KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\contrib\__init__.pyc
    182B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\contrib\_appengine_environ.pyc
    1001B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\exceptions.pyc
    8KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\fields.pyc
    4KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\filepost.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\packages\__init__.pyc
    183B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\packages\six.pyc
    24KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\poolmanager.pyc
    8KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\request.pyc
    2KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\response.pyc
    15KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\__init__.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\connection.pyc
    2KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\proxy.pyc
    883B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\queue.pyc
    1023B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\request.pyc
    2KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\response.pyc
    1KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\retry.pyc
    9KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\ssl_.pyc
    7KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\ssl_match_hostname.pyc
    2KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\ssltransport.pyc
    .js 6KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\timeout.pyc
    3KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\url.pyc
    7KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib3\util\wait.pyc
    2KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib\__init__.pyc
    159B
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib\error.pyc
    2KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib\parse.pyc
    20KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib\request.pyc
    58KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\urllib\response.pyc
    2KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\vdf\__init__.pyc
    10KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\vdf\vdict.pyc
    8KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\lib\win32crypt.pyd
    .dll 120KB
  • launcher_0827ac37761b48068b2d0453028b8cd0\python37.dll
    .dll 3.6MB

f3c7867d69abb5b26dd35f79839808d4230180937a3104a02abe1d3d0df79c0c

  • SHA256 f3c7867d69abb5b26dd35f79839808d4230180937a3104a02abe1d3d0df79c0c
  • MD5 SHA1 SHA512 SSDEEP TLSH