bloodrun-launcher[.]zip

General

Target
bloodrun-launcher.zip
Size 3.9MB
Sample261020-vn5cssty4q
SHA256 038125b2773c3d6d7215a73df6d8009fa433f978ca381536ed5e020e2207a916
MD5 f4161f44e352520329c3fd77b88f56ec
SHA1 e6831624d6e17d115338219bf2cd64583310c315
SHA512 01432776f8a3eb589b511df121c5f7106216bef46032d4b5dd30b9ffda68f1f379d295a45c076f0972f23e4556e872e56e910aa2d549f864b9dd3e9a8fc70819
SSDEEP 98304:eGVLt/OnLjHljWSJTABuKsRTePTopWjMCr0XDrZ2ZvfthNdB:FLt/OnHHpWJB49pWB0Tl2dtpB
TLSH
T1A816336B7755546CADEFC3E618627079886CB39E04E9B8FD6860337776707B10E3A022
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Bloodrun/bloodrun-launcher.exe

File Explorer

bloodrun-launcher.zip

.zip 3.9MB
Bloodrun/bloodrun-launcher.exe

.exe 7.6MB

bloodrun-launcher.zip

SHA256 038125b2773c3d6d7215a73df6d8009fa433f978ca381536ed5e020e2207a916
MD5 f4161f44e352520329c3fd77b88f56ec
SHA1 e6831624d6e17d115338219bf2cd64583310c315
SHA512 01432776f8a3eb589b511df121c5f7106216bef46032d4b5dd30b9ffda68f1f379d295a45c076f0972f23e4556e872e56e910aa2d549f864b9dd3e9a8fc70819
SSDEEP 98304:eGVLt/OnLjHljWSJTABuKsRTePTopWjMCr0XDrZ2ZvfthNdB:FLt/OnHHpWJB49pWB0Tl2dtpB
TLSH
T1A816336B7755546CADEFC3E618627079886CB39E04E9B8FD6860337776707B10E3A022
MD5 SHA1 SHA512 SSDEEP TLSH

Bloodrun/bloodrun-launcher.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7eb68c181898cae7e1984500c79d0c8e83ff7709b73dc22292e6ddd195fd9961
MD5 a39f4b0cd617c197bd2813ce8628b6cd
SHA1 1a67eb9f42a3d0799d940c6c74035fcf657cdefb
SHA512 978d21f445e2e502141a3311bbcbe734de528fd46263261f05c7ad29492417c91371e07e9f0db658a404afabda84566ffd9bb53c23ba46d4b285301830b28928
SSDEEP 98304:2CktqkwqzmKOYL09t3vdkf28RcEoyAVCb4pABpjrznkN0:8or/8L09hvdW0C6APjPk
TLSH
T1E386BF15FFDC8F27D4AF87B694B2611596B4E8CEE352D74B2580F9F968027A40C1322B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7854414

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

bloodrun-launcher.zip

Bloodrun/bloodrun-launcher.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

bloodrun-launcher.zip

Bloodrun/bloodrun-launcher.exe

mscoree

dotnet