Guns[.]lol viewbot[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Guns.lol viewbot.zip
Size 71.1MB
Sample261110-xhwjtaaa49
SHA256 cafbe5da01b32344cd447db8aebca49f78d2857c12ab19d2eb6d954f0df6e30b
MD5 f9625c696485abe68c5e29dbba7e014b
SHA1 cff74b1b2ec7075435a744bc231c440d415bbdcf
SHA512 6627bfed8383bd229f2caed2a89c15e726e0331b8598a8652d03bbe2168e90f7887e87116b30b3522c0a13e382d399905c6328a4a886d61d8a67ec7375ddaaed
SSDEEP 1572864:DsRLirIHDwRQPzCNA85F+mZLjZG8gzotu/B+yYbzXDSpcIZ/attN:DsRLirFRQPWaQ+mZo83tuwPTqY
TLSH
T1DBF733B6C43E120CA1009379DF9D8DD2F40FF5926A9A6266E758C7F62C747CB0B97068
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Guns.lol viewbot/Guns.Lol Viewbot 1.0.2.exe

File Explorer

Guns.lol viewbot.zip

.zip 71.1MB
Guns.lol viewbot/Guns.Lol Viewbot 1.0.2.exe

.exe 71.1MB
Guns.lol viewbot/readme.txt

305B

Guns.lol viewbot.zip

SHA256 cafbe5da01b32344cd447db8aebca49f78d2857c12ab19d2eb6d954f0df6e30b
MD5 f9625c696485abe68c5e29dbba7e014b
SHA1 cff74b1b2ec7075435a744bc231c440d415bbdcf
SHA512 6627bfed8383bd229f2caed2a89c15e726e0331b8598a8652d03bbe2168e90f7887e87116b30b3522c0a13e382d399905c6328a4a886d61d8a67ec7375ddaaed
SSDEEP 1572864:DsRLirIHDwRQPzCNA85F+mZLjZG8gzotu/B+yYbzXDSpcIZ/attN:DsRLirFRQPWaQ+mZo83tuwPTqY
TLSH
T1DBF733B6C43E120CA1009379DF9D8DD2F40FF5926A9A6266E758C7F62C747CB0B97068
MD5 SHA1 SHA512 SSDEEP TLSH

Password

porno

Guns.lol viewbot/Guns.Lol Viewbot 1.0.2.exe

IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
SHA256 4b18fec7cfac43ff92d336ab4cb8b7180679e20a051bedfc8f415bcc153ef9e8
MD5 497d4b9904e878dea8ff79840241f18c
SHA1 2eae8d12b6cda1498b2b6e5032aefd4857593704
SHA512 de954d7b54f54507bacc7415aab7ae6574d383f6c92d9580fd228883a64c9702d5a77d84c09da956b386281296cf88bbc9c363153ea1b9737d2b4d6f41451c78
SSDEEP 1572864:rhzLa6m9bkDS1Gyz6otLK4d5Zn0mU9onmZNeKIFd1x4pkuJ1e1b:rhzLa6vDS1n+UK4d0mbnmCFTs
TLSH
T10BF7336A883F092CF10487798F9D9AC1F80BF5411AAA7636EB54C4B93C74B8A1F5747C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

porno

Minor OS version

Major OS version

Entry point

5329

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Guns.lol viewbot.zip

Guns.lol viewbot/Guns.Lol Viewbot 1.0.2.exe

msvcrt

shell32

kernel32

generic

Guns.lol viewbot/readme.txt