Bratty_Family.rar

First submission 2023-09-12 21:55:15

File details

File type: RAR archive data, v5
Mime type: application/x-rar
File size: 62562.43 KB (64063933 bytes)
MD5: 53d471ebf3f42703d2251571a7fc66a1
SHA1: 853bd2ddd7a4a5201d2163dd8305a0ba8488fda2
SHA256: a4c4525569385a6f59dcc2bd4202e28c5e19ac3acdc5a44c27f38c4d60eef870
Virus Total: 2/56 VT report date: 2023-09-12 11:21:54

File features detected

Is DLL

Packers

Anti Debug

Anti VM

Signed

XOR

URLs, FQDN and IP indicators 1

URL Host (FQDN/IP) Date Added
hXXps://cdn.discordapp.com/attachments/1149782713079959755/1149790547087732766/Bratty_Family.rar VirusTotal Report cdn.discordapp.com VirusTotal Report 2023-09-12 21:55:15

Strings analysis - File found

Executable
}@> e.SO
%y.SO
Library
%s%s.dll
ADVAPI32.dll
GDI32.dll
SHELL32.dll
USER32.dll
ole32.dll
KERNEL32.dll
COMCTL32.dll

Strings analysis - Possible URLs found 12

http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
http://www.microsoft.com/pkiops/docs/primarycps.htm0@
http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
https://www.microsoft.com
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0
http://www.microsoft.com/pkiops/Docs/Repository.htm0
http://nsis.sf.net/NSIS_Error
http://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l
http://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0
http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a