General

  • Target

    7872846234.zip

  • Size

    26.7MB

  • MD5

    483ee0cc13ad8760d6a9dc1b82c296ad

  • SHA1

    23c1bdb265da23e3b2cce5b98fd856956e3c91cf

  • SHA256

    d049dae3713d32ba72b916c9670554adf533d2ec6f63526f060224b43a8e0dbf

  • SHA512

    912023a87decec16dd6c778e9ef689208e19743365a27dfb933a5ee4121ceee187d18a53315173f2f1363c1742fa054cb0e0c3060d2c5c0e86d2577cf25a29af

  • SSDEEP

    393216:tHv5Pk6FIt0LIpIAxQ0SV357CTkMOOD4xGxzWDba9Ub+OCtuiYY0q60bDczn9:txPs0deSV57ukMW2zkbSUb+3S0boB

Score
N/A

Malware Config

Signatures

Files

  • 7872846234.zip
    .zip

    Password: infected

  • 26a30811833fd93ecb266b4e2287e9b30cb99aff38e5109398462946fced4ab0
    .iso

    Password: infected

  • DBUG.TXT
    .ps1
  • LOCALES/AM_PAK.INF
  • LOCALES/EN_GB.PAK
  • LOCALES/EN_GB_PA.INF
  • LOCALES/EN_US.PAK
  • LOCALES/EN_US_PA.INF
  • LOCALES/ES.PAK
  • LOCALES/ES_419.PAK
  • LOCALES/ES_419_P.INF
  • LOCALES/ES_PAK.INF
  • LOCALES/FR.PAK
  • LOCALES/FR_PAK.INF
  • LOCALES/IT.PAK
  • LOCALES/IT_PAK.INF
  • LOCALES/LOCAL.ZIP
    .zip

    Password: infected

  • WinSupportSn/AudioCapture.dll
    .dll windows x86

    Password: infected

    ba7e9a7cd5ee54c14d0881068fc905c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WinSupportSn/HTCTL32.DLL
    .dll windows x86

    Password: infected

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WinSupportSn/NSM.LIC
  • WinSupportSn/PCICHEK.DLL
    .dll windows x86

    Password: infected

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WinSupportSn/PCICL32.DLL
    .dll windows x86

    Password: infected

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WinSupportSn/TCCTL32.DLL
    .dll windows x86

    Password: infected

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WinSupportSn/client32.exe
    .exe windows x86

    Password: infected

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • WinSupportSn/client32.ini
  • WinSupportSn/msvcr100.dll
    .dll windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WinSupportSn/nskbfltr.inf
  • WinSupportSn/nsm_vpro.ini
  • WinSupportSn/pcicapi.dll
    .dll windows x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WinSupportSn/remcmdstub.exe
    .exe windows x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • LOCALES/LT_PAK.INF
  • LOCALES/MSAMRNBD.DLL
    .dll regsvr32 windows x86

    6adc54561e0fc096445743d2cc5e9fc2


    Headers

    Imports

    Exports

    Sections

  • LOCALES/MSAMRNBE.DLL
    .dll regsvr32 windows x86

    3f76644f0b73bae599070d22b61b7618


    Headers

    Imports

    Exports

    Sections

  • LOCALES/MSAUDDEC.DLL
    .dll regsvr32 windows x86

    922e3393bc553bfbb5cf5d5874bd5c2b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LOCALES/MSAUDITE.DLL
    .dll windows x86


    Headers

    Sections

  • LOCALES/NW_100_P.PAK
  • LOCALES/PROTONVP.EXE
    .exe windows x86

    836688c7d21e39394af41ce9a8c2d728


    Code Sign

    Headers

    Imports

    Sections

  • LOCALES/TWAIN_32.DLL
    .dll windows x86

    ddb14e5fc95c0690491e1745b60b6efe


    Headers

    Imports

    Exports

    Sections

  • LOCALES/TWAIN_32.INI
  • LOCALES/UNINSTAL.EXE
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SECURITY.LNK
    .lnk