Guns[.]lol viewbot[.]zip

General

Target
Guns.lol viewbot.zip
Size 73.1MB
Sample261107-q12p8afa87
SHA256 fab73f3a44ccbba8a05df8fce667cdbcbf0ce7e966174d468b1a8dd554870840
MD5 907cdb4ae43e5bd75e9904b48b964ded
SHA1 d433643079493fdb88f0020644a621b49fee0047
SHA512 a9759f8f44e9f577321c23782efa09392e508843b7f1a7e343abe195cf96a147e1c92e7223746597786bffabd3039b26e5a6156d27b84a423ac612bbbc5a20b8
SSDEEP 1572864:tIJGi647fsjlns9Vv19xa0tpJrK15iM1+qoFV9RnJ4Z0VBy8bIL6Jt7:w7fsjRsU0tpJWjiM1+qoFvRnJjVBy81F
TLSH
T1EFF733BD807083A24104318E9FC5CB59BEB6759ACB24CAACD3C5571DBA0CB67B5C906F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot.exe

File Explorer

Guns.lol viewbot.zip

.zip 73.1MB
Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot.exe

.exe 73.1MB
Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot/readme.txt

305B

Guns.lol viewbot.zip

SHA256 fab73f3a44ccbba8a05df8fce667cdbcbf0ce7e966174d468b1a8dd554870840
MD5 907cdb4ae43e5bd75e9904b48b964ded
SHA1 d433643079493fdb88f0020644a621b49fee0047
SHA512 a9759f8f44e9f577321c23782efa09392e508843b7f1a7e343abe195cf96a147e1c92e7223746597786bffabd3039b26e5a6156d27b84a423ac612bbbc5a20b8
SSDEEP 1572864:tIJGi647fsjlns9Vv19xa0tpJrK15iM1+qoFV9RnJ4Z0VBy8bIL6Jt7:w7fsjRsU0tpJWjiM1+qoFvRnJjVBy81F
TLSH
T1EFF733BD807083A24104318E9FC5CB59BEB6759ACB24CAACD3C5571DBA0CB67B5C906F
MD5 SHA1 SHA512 SSDEEP TLSH

Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot.exe

IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
SHA256 1c9a463e4ef7f6f7629b6c58208ef647b46c170dc5cc240bff26c8313a9d13b0
MD5 5ef05b8cb91053282d19ce9d0116a5e5
SHA1 29c6af66e29f2f0d8d3d9ca7fc881ee70b36b030
SHA512 8275cf252997e06c0726803f4dc6122b2bec3282e5f0ceb1a03ae6ad8516174148b879134c35cf455bb3efb4734c11b571130f05be1d519605460f2efae96487
SSDEEP 1572864:2rzbYrV0pFh0XNjRJ09meX7vVG3XIuHqUSv9J/dZUVCH7eIl4X0L:HrV0pz0d7eX7vEHIuHqUSvD/dZHH7eId
TLSH
T188F7337A456043B2C354328A8FC2C35ABE75789D9D24D96CD3C4D19EA62CA7BB1C903F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5237

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Guns.lol viewbot.zip

Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot.exe

msvcrt

shell32

kernel32

generic

Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot/readme.txt

Sharing

General

Malware Config

Signatures

File Explorer

Guns.lol viewbot.zip

Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot.exe

msvcrt

shell32

kernel32

generic

Guns.lol viewbot/Guns.lol viewbot/Guns.lol viewbot/readme.txt