-VladMelSM-main[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
-VladMelSM-main.zip
Size 3.4MB
Sample261024-3cbv4ssx3m
SHA256 f40d051fb022225bed03d41f580b661fcead69303bc53bb76d44b4b1c55635d7
MD5 2d9c1ee6df6478bc937ffd209648a0df
SHA1 2f0bdda12d79d1ad753fdc0be6e5e5bd930ae940
SHA512 5a8cc0e8232830bb1c689a918f8779f029012a76ce7900a1806273029f62a04ff4508f41c367c031099494d3b4c02ed16d8bd9cbdefe771bbadbcf69938e8ba2
SSDEEP 98304:l0elXbW+5704+0BkrqZNmBDYLHFW/9wahPNRum:blX62045mBDYRyH13
TLSH
T159F533C298B8D8C0E15CD1A8E0333617372DDD865668A71EC3DEEF184163969A5FD23E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

upx

Malware Config

Extracted

Language

Deobfuscated

Source

URLs

exe.dropper
https://github.com/matvejsklarov9-cyber/-VladMelSM/raw/refs/heads/main/UserAssistView.exe

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/-VladMelSM-main/UserAssistView.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/-VladMelSM-main/UserAssistView.exe

File Explorer

-VladMelSM-main.zip

.zip 3.4MB
-VladMelSM-main/.gitignore

290B
-VladMelSM-main/CNAME

19B
-VladMelSM-main/UserAssistView.exe

.exe 3.4MB
-VladMelSM-main/index.html

.ps1 604B

-VladMelSM-main.zip

SHA256 f40d051fb022225bed03d41f580b661fcead69303bc53bb76d44b4b1c55635d7
MD5 2d9c1ee6df6478bc937ffd209648a0df
SHA1 2f0bdda12d79d1ad753fdc0be6e5e5bd930ae940
SHA512 5a8cc0e8232830bb1c689a918f8779f029012a76ce7900a1806273029f62a04ff4508f41c367c031099494d3b4c02ed16d8bd9cbdefe771bbadbcf69938e8ba2
SSDEEP 98304:l0elXbW+5704+0BkrqZNmBDYLHFW/9wahPNRum:blX62045mBDYRyH13
TLSH
T159F533C298B8D8C0E15CD1A8E0333617372DDD865668A71EC3DEEF184163969A5FD23E
MD5 SHA1 SHA512 SSDEEP TLSH

-VladMelSM-main/UserAssistView.exe

SHA256 0feababcec8c64a26548c566d4e4b190b172058f62c2069b2e5d86c8736a9a20
MD5 527e5dfa3b9add708ac4d6f0c76fdf0b
SHA1 7bf63cf4f006c363d290270832122ec3d4ce61d8
SHA512 8f5eac91ffdb74e7f0f6baf44dc8ba30413122e3637cf5d2769aa7d388b8a3d8659453538b060f231c11f4616304f6fc4e2ba3112d69b3e1aa1321d500c83c7a
SSDEEP 98304:xwxTzIQ57ISgYtGj+fn2ND8HHhyhD2aZx5/s:CxTcEIS92ND8hSrl
TLSH
T110F533C694B9D4D0E15DE0B8E0333617332DDD824564A72EC7EEDF1801639A9A6FD22E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12920576

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

-VladMelSM-main.zip

-VladMelSM-main/.gitignore

-VladMelSM-main/CNAME

-VladMelSM-main/UserAssistView.exe

generic

-VladMelSM-main/index.html