Static task
static1
General
-
Target
Mullvad.zip
-
Size
1.5MB
-
MD5
6174e9b65f89ecba994b261f81e261f1
-
SHA1
606f5e2b772be42f9b8d086fe63c32a74c7d2f07
-
SHA256
34fa7eba46ac9aff89cb7d57d17a87d3bca1be4a9a02e73fa5233c82969ed12a
-
SHA512
b1925fe7a72d005525d8b8b05ec66fe68281f2f8bb5cf96f39156222586e7699e6764d25644394a77b690a1b097fda1c008064652f43aa8d69696f1a2ac6c431
-
SSDEEP
24576:pdD8rBxZEs9ov6aHNJyLcS/NF25HVSMemL5VMnIJ/gkVdyFmLyH2AiveI8hQ7ziD:pdDeB74yoSLaVR78n6/BUQmH2rf8hMbS
Malware Config
Signatures
Files
-
Mullvad.zip.zip
Password: vpn
-
Mullvad/App/ActiveXInstallService.admx
-
Mullvad/App/AddRemovePrograms.admx
-
Mullvad/App/AppCompat.admx
-
Mullvad/App/AppXRuntime.admx.xml
-
Mullvad/App/AppxPackageManager.admx
-
Mullvad/App/AttachmentManager.admx
-
Mullvad/App/AuditSettings.admx.xml
-
Mullvad/App/AutoPlay.admx
-
Mullvad/App/Biometrics.admx
-
Mullvad/App/Bits.admx
-
Mullvad/App/CEIPEnable.admx
-
Mullvad/App/COM.admx
-
Mullvad/App/CipherSuiteOrder.admx
-
Mullvad/App/Conf.admx
-
Mullvad/App/Config.ini
-
Mullvad/App/ControlPanel.admx
-
Mullvad/App/ControlPanelDisplay.admx
-
Mullvad/App/Cpls.admx
-
Mullvad/App/CredSsp.admx
-
Mullvad/App/CredUI.admx
-
Mullvad/App/CredentialProviders.admx
-
Mullvad/App/CtrlAltDel.admx
-
Mullvad/App/DCOM.admx
-
Mullvad/App/DFS.admx
-
Mullvad/App/DWM.admx
-
Mullvad/App/Desktop.admx
-
Mullvad/App/DeviceCompat.admx
-
Mullvad/App/DeviceInstallation.admx
-
Mullvad/App/DeviceSetup.admx
-
Mullvad/App/DigitalLocker.admx
-
Mullvad/App/DiskDiagnostic.admx
-
Mullvad/App/DiskNVCache.admx
-
Mullvad/App/DiskQuota.admx
-
Mullvad/App/DistributedLinkTracking.admx
-
Mullvad/App/DnsClient.admx
-
Mullvad/App/EAIME.admx
-
Mullvad/App/EarlyLaunchAM.admx
-
Mullvad/App/EdgeUI.admx
-
Mullvad/App/EncryptFilesonMove.admx
-
Mullvad/App/ErrorReporting.admx
-
Mullvad/App/EventForwarding.admx.xml
-
Mullvad/App/EventLog.admx
-
Mullvad/App/EventViewer.admx
-
Mullvad/App/Explorer.admx
-
Mullvad/App/ExternalBoot.admx.xml
-
Mullvad/App/FileHistory.admx
-
Mullvad/App/FileRecovery.admx
-
Mullvad/App/FileRevocation.admx
-
Mullvad/App/FileServerVSSProvider.admx
-
Mullvad/App/FileSys.admx.xml
-
Mullvad/App/FolderRedirection.admx
-
Mullvad/App/FramePanes.admx
-
Mullvad/App/GameExplorer.admx
-
Mullvad/App/Globalization.admx
-
Mullvad/App/GroupPolicy-Server.admx
-
Mullvad/App/GroupPolicy.admx
-
Mullvad/App/GroupPolicyPreferences.admx
-
Mullvad/App/Help.admx
-
Mullvad/App/HelpAndSupport.admx
-
Mullvad/App/ICM.admx
-
Mullvad/App/IIS.admx
-
Mullvad/App/InkWatson.admx
-
Mullvad/App/Kerberos.admx
-
Mullvad/App/LanmanServer.admx
-
Mullvad/App/LeakDiagnostic.admx
-
Mullvad/App/LinkLayerTopologyDiscovery.admx
-
Mullvad/App/LocationProviderAdm.admx
-
Mullvad/App/Logon.admx
-
Mullvad/App/MMC.admx
-
Mullvad/App/MMCSnapIns2.admx
-
Mullvad/App/MMCSnapins.admx
-
Mullvad/App/MSDT.admx
-
Mullvad/App/MSI.admx
-
Mullvad/App/MediaCenter.admx
-
Mullvad/App/MobilePCMobilityCenter.admx
-
Mullvad/App/MobilePCPresentationSettings.admx
-
Mullvad/App/Msi-FileRecovery.admx
-
Mullvad/App/NAPXPQec.admx
-
Mullvad/App/NCSI.admx
-
Mullvad/App/Netlogon.admx
-
Mullvad/App/NetworkConnections.admx
-
Mullvad/App/NetworkIsolation.admx
-
Mullvad/App/NetworkProjection.admx
-
Mullvad/App/OfflineFiles.admx
-
Mullvad/App/P2P-pnrp.admx
-
Mullvad/App/ParentalControls.admx
-
Mullvad/App/PeerToPeerCaching.admx
-
Mullvad/App/PenTraining.admx
-
Mullvad/App/PerformanceDiagnostics.admx
-
Mullvad/App/PerformancePerftrack.admx
-
Mullvad/App/Power.admx
-
Mullvad/App/PowerShellExecutionPolicy.admx
-
Mullvad/App/PreviousVersions.admx
-
Mullvad/App/Printing.admx
-
Mullvad/App/Printing2.admx
-
Mullvad/App/Programs.admx
-
Mullvad/App/PswdSync.admx
-
Mullvad/App/QOS.admx
-
Mullvad/App/RPC.admx
-
Mullvad/App/RacWmiProv.admx
-
Mullvad/App/Radar.admx
-
Mullvad/App/ReAgent.admx
-
Mullvad/App/Reliability.admx
-
Mullvad/App/RemoteAssistance.admx
-
Mullvad/App/RemovableStorage.admx
-
Mullvad/App/Scripts.admx
-
Mullvad/App/Securitycenter.admx
-
Mullvad/App/Sensors.admx
-
Mullvad/App/ServerManager.admx
-
Mullvad/App/Servicing.admx
-
Mullvad/App/SettingSync.admx
-
Mullvad/App/Setup.admx
-
Mullvad/App/SharedFolders.admx
-
Mullvad/App/Sharing.admx
-
Mullvad/App/Shell-CommandPrompt-RegEditTools.admx
-
Mullvad/App/ShellWelcomeCenter.admx
-
Mullvad/App/Sidebar.admx
-
Mullvad/App/SkyDrive.admx.xml
-
Mullvad/App/Smartcard.admx
-
Mullvad/App/Snis.admx
-
Mullvad/App/Snmp.admx
-
Mullvad/App/SoundRec.admx
-
Mullvad/App/StartMenu.admx
-
Mullvad/App/SystemRestore.admx
-
Mullvad/App/TPM.admx
-
Mullvad/App/TabletPCInputPanel.admx
-
Mullvad/App/TabletShell.admx
-
Mullvad/App/TaskScheduler.admx
-
Mullvad/App/Taskbar.admx
-
Mullvad/App/TerminalServer-Server.admx
-
Mullvad/App/TerminalServer.admx
-
Mullvad/App/Thumbnails.admx
-
Mullvad/App/TouchInput.admx
-
Mullvad/App/UserProfiles.admx
-
Mullvad/App/VolumeEncryption.admx
-
Mullvad/App/W32Time.admx
-
Mullvad/App/WCM.admx
-
Mullvad/App/WDI.admx
-
Mullvad/App/WPN.admx
-
Mullvad/App/WinCal.admx.xml
-
Mullvad/App/WinInit.admx
-
Mullvad/App/WinLogon.admx
-
Mullvad/App/Windows.admx
-
Mullvad/App/WindowsAnytimeUpgrade.admx
-
Mullvad/App/WindowsBackup.admx
-
Mullvad/App/WindowsColorSystem.admx
-
Mullvad/App/WindowsConnectNow.admx
-
Mullvad/App/WindowsDefender.admx
-
Mullvad/App/WindowsExplorer.admx
-
Mullvad/App/WindowsFileProtection.admx
-
Mullvad/App/WindowsFirewall.admx
-
Mullvad/App/WindowsMail.admx
-
Mullvad/App/WindowsMediaDRM.admx
-
Mullvad/App/WindowsMediaPlayer.admx
-
Mullvad/App/WindowsMessenger.admx
-
Mullvad/App/WindowsProducts.admx
-
Mullvad/App/WindowsRemoteManagement.admx
-
Mullvad/App/WindowsRemoteShell.admx
-
Mullvad/App/WindowsServer.admx
-
Mullvad/App/WindowsUpdate.admx
-
Mullvad/App/Winsrv.admx
-
Mullvad/App/WordWheel.admx
-
Mullvad/App/WorkFolders-Client.admx
-
Mullvad/App/WorkplaceJoin.admx.xml
-
Mullvad/App/en-US/ActiveXInstallService.adml.xml
-
Mullvad/App/en-US/AddRemovePrograms.adml.xml
-
Mullvad/App/en-US/AppCompat.adml.xml
-
Mullvad/App/en-US/AppXRuntime.adml.xml
-
Mullvad/App/en-US/AppxPackageManager.adml.xml
-
Mullvad/App/en-US/AttachmentManager.adml.xml
-
Mullvad/App/en-US/AuditSettings.adml.xml
-
Mullvad/App/en-US/AutoPlay.adml.xml
-
Mullvad/App/en-US/Biometrics.adml.xml
-
Mullvad/App/en-US/Bits.adml.xml
-
Mullvad/App/en-US/CEIPEnable.adml.xml
-
Mullvad/App/en-US/COM.adml.xml
-
Mullvad/App/en-US/CipherSuiteOrder.adml.xml
-
Mullvad/App/en-US/Conf.adml.xml
-
Mullvad/App/en-US/ControlPanel.adml.xml
-
Mullvad/App/en-US/ControlPanelDisplay.adml.xml
-
Mullvad/App/en-US/Cpls.adml.xml
-
Mullvad/App/en-US/CredSsp.adml.xml
-
Mullvad/App/en-US/CredUI.adml.xml
-
Mullvad/App/en-US/CredentialProviders.adml.xml
-
Mullvad/App/en-US/CtrlAltDel.adml.xml
-
Mullvad/App/en-US/DCOM.adml.xml
-
Mullvad/App/en-US/DFS.adml.xml
-
Mullvad/App/en-US/DWM.adml.xml
-
Mullvad/App/en-US/Desktop.adml.xml
-
Mullvad/App/en-US/DeviceCompat.adml.xml
-
Mullvad/App/en-US/DeviceInstallation.adml.xml
-
Mullvad/App/en-US/DeviceSetup.adml.xml
-
Mullvad/App/en-US/DigitalLocker.adml.xml
-
Mullvad/App/en-US/DiskDiagnostic.adml.xml
-
Mullvad/App/en-US/DiskNVCache.adml.xml
-
Mullvad/App/en-US/DiskQuota.adml.xml
-
Mullvad/App/en-US/DistributedLinkTracking.adml.xml
-
Mullvad/App/en-US/DnsClient.adml.xml
-
Mullvad/App/en-US/EAIME.adml.xml
-
Mullvad/App/en-US/EarlyLaunchAM.adml
-
Mullvad/App/en-US/EdgeUI.adml.xml
-
Mullvad/App/en-US/EncryptFilesonMove.adml.xml
-
Mullvad/App/en-US/ErrorReporting.adml.xml
-
Mullvad/App/en-US/EventForwarding.adml.xml
-
Mullvad/App/en-US/EventLog.adml.xml
-
Mullvad/App/en-US/EventViewer.adml.xml
-
Mullvad/App/en-US/Explorer.adml.xml
-
Mullvad/App/en-US/ExternalBoot.adml.xml
-
Mullvad/App/en-US/FileHistory.adml.xml
-
Mullvad/App/en-US/FileRecovery.adml.xml
-
Mullvad/App/en-US/FileRevocation.adml.xml
-
Mullvad/App/en-US/FileServerVSSProvider.adml.xml
-
Mullvad/App/en-US/FileSys.adml.xml
-
Mullvad/App/en-US/FolderRedirection.adml.xml
-
Mullvad/App/en-US/FramePanes.adml.xml
-
Mullvad/App/en-US/GameExplorer.adml.xml
-
Mullvad/App/en-US/Globalization.adml.xml
-
Mullvad/App/en-US/GroupPolicy-Server.adml.xml
-
Mullvad/App/en-US/GroupPolicy.adml.xml
-
Mullvad/App/en-US/GroupPolicyPreferences.adml.xml
-
Mullvad/App/en-US/Help.adml.xml
-
Mullvad/App/en-US/HelpAndSupport.adml.xml
-
Mullvad/App/en-US/ICM.adml.xml
-
Mullvad/App/en-US/IIS.adml.xml
-
Mullvad/App/en-US/InetRes.adml.xml
-
Mullvad/App/en-US/InkWatson.adml.xml
-
Mullvad/App/en-US/KDC.adml.xml
-
Mullvad/App/en-US/Kerberos.adml.xml
-
Mullvad/App/en-US/LanmanServer.adml.xml
-
Mullvad/App/en-US/LeakDiagnostic.adml.xml
-
Mullvad/App/en-US/LinkLayerTopologyDiscovery.adml.xml
-
Mullvad/App/en-US/LocationProviderAdm.adml.xml
-
Mullvad/App/en-US/Logon.adml.xml
-
Mullvad/App/en-US/MMC.adml.xml
-
Mullvad/App/en-US/MMCSnapIns2.adml.xml
-
Mullvad/App/en-US/MMCSnapins.adml.xml
-
Mullvad/App/en-US/MSDT.adml.xml
-
Mullvad/App/en-US/MSI.adml.xml
-
Mullvad/App/en-US/MediaCenter.adml.xml
-
Mullvad/App/en-US/MobilePCMobilityCenter.adml.xml
-
Mullvad/App/en-US/MobilePCPresentationSettings.adml.xml
-
Mullvad/App/en-US/Msi-FileRecovery.adml.xml
-
Mullvad/App/en-US/NAPXPQec.adml.xml
-
Mullvad/App/en-US/NCSI.adml.xml
-
Mullvad/App/en-US/Netlogon.adml.xml
-
Mullvad/App/en-US/NetworkConnections.adml.xml
-
Mullvad/App/en-US/NetworkIsolation.adml
-
Mullvad/App/en-US/NetworkProjection.adml.xml
-
Mullvad/App/en-US/OfflineFiles.adml.xml
-
Mullvad/App/en-US/P2P-pnrp.adml.xml
-
Mullvad/App/en-US/ParentalControls.adml.xml
-
Mullvad/App/en-US/PeerToPeerCaching.adml.xml
-
Mullvad/App/en-US/PenTraining.adml.xml
-
Mullvad/App/en-US/PerformanceDiagnostics.adml.xml
-
Mullvad/App/en-US/PerformancePerftrack.adml.xml
-
Mullvad/App/en-US/Power.adml.xml
-
Mullvad/App/en-US/PowerShellExecutionPolicy.adml.xml
-
Mullvad/App/en-US/PreviousVersions.adml.xml
-
Mullvad/App/en-US/Printing.adml.xml
-
Mullvad/App/en-US/Printing2.adml.xml
-
Mullvad/App/en-US/Programs.adml.xml
-
Mullvad/App/en-US/PswdSync.adml.xml
-
Mullvad/App/en-US/QOS.adml.xml
-
Mullvad/App/en-US/RPC.adml.xml
-
Mullvad/App/en-US/RacWmiProv.adml.xml
-
Mullvad/App/en-US/Radar.adml.xml
-
Mullvad/App/en-US/ReAgent.adml.xml
-
Mullvad/App/en-US/Reliability.adml.xml
-
Mullvad/App/en-US/RemoteAssistance.adml.xml
-
Mullvad/App/en-US/RemovableStorage.adml.xml
-
Mullvad/App/en-US/Scripts.adml.xml
-
Mullvad/App/en-US/Securitycenter.adml.xml
-
Mullvad/App/en-US/Sensors.adml.xml
-
Mullvad/App/en-US/ServerManager.adml.xml
-
Mullvad/App/en-US/Servicing.adml.xml
-
Mullvad/App/en-US/SettingSync.adml.xml
-
Mullvad/App/en-US/Setup.adml.xml
-
Mullvad/App/en-US/SharedFolders.adml.xml
-
Mullvad/App/en-US/Sharing.adml.xml
-
Mullvad/App/en-US/Shell-CommandPrompt-RegEditTools.adml.xml
-
Mullvad/App/en-US/ShellWelcomeCenter.adml.xml
-
Mullvad/App/en-US/Sidebar.adml.xml
-
Mullvad/App/en-US/SkyDrive.adml.xml
-
Mullvad/App/en-US/Smartcard.adml.xml
-
Mullvad/App/en-US/Snis.adml.xml
-
Mullvad/App/en-US/Snmp.adml.xml
-
Mullvad/App/en-US/SoundRec.adml.xml
-
Mullvad/App/en-US/StartMenu.adml.xml
-
Mullvad/App/en-US/SystemRestore.adml.xml
-
Mullvad/App/en-US/TPM.adml.xml
-
Mullvad/App/en-US/TabletPCInputPanel.adml.xml
-
Mullvad/App/en-US/TabletShell.adml.xml
-
Mullvad/App/en-US/TaskScheduler.adml.xml
-
Mullvad/App/en-US/Taskbar.adml.xml
-
Mullvad/App/en-US/TerminalServer-Server.adml.xml
-
Mullvad/App/en-US/TerminalServer.adml.xml
-
Mullvad/App/en-US/Thumbnails.adml.xml
-
Mullvad/App/en-US/TouchInput.adml.xml
-
Mullvad/App/en-US/UserProfiles.adml.xml
-
Mullvad/App/en-US/VolumeEncryption.adml.xml
-
Mullvad/App/en-US/W32Time.adml.xml
-
Mullvad/App/en-US/WCM.adml.xml
-
Mullvad/App/en-US/WDI.adml.xml
-
Mullvad/App/en-US/WPN.adml.xml
-
Mullvad/App/en-US/WinCal.adml.xml
-
Mullvad/App/en-US/WinInit.adml.xml
-
Mullvad/App/en-US/WinLogon.adml.xml
-
Mullvad/App/en-US/Windows.adml.xml
-
Mullvad/App/en-US/WindowsAnytimeUpgrade.adml.xml
-
Mullvad/App/en-US/WindowsBackup.adml.xml
-
Mullvad/App/en-US/WindowsColorSystem.adml.xml
-
Mullvad/App/en-US/WindowsConnectNow.adml.xml
-
Mullvad/App/en-US/WindowsDefender.adml
-
Mullvad/App/en-US/WindowsExplorer.adml.xml
-
Mullvad/App/en-US/WindowsFileProtection.adml.xml
-
Mullvad/App/en-US/WindowsFirewall.adml.xml
-
Mullvad/App/en-US/WindowsMail.adml.xml
-
Mullvad/App/en-US/WindowsMediaDRM.adml.xml
-
Mullvad/App/en-US/WindowsMediaPlayer.adml.xml
-
Mullvad/App/en-US/WindowsMessenger.adml.xml
-
Mullvad/App/en-US/WindowsProducts.adml.xml
-
Mullvad/App/en-US/WindowsRemoteManagement.adml.xml
-
Mullvad/App/en-US/WindowsRemoteShell.adml.xml
-
Mullvad/App/en-US/WindowsServer.adml.xml
-
Mullvad/App/en-US/WindowsUpdate.adml.xml
-
Mullvad/App/en-US/Winsrv.adml.xml
-
Mullvad/App/en-US/WordWheel.adml.xml
-
Mullvad/App/en-US/WorkFolders-Client.adml.xml
-
Mullvad/App/en-US/WorkplaceJoin.adml.xml
-
Mullvad/App/en-US/fthsvc.adml.xml
-
Mullvad/App/en-US/hotspotauth.adml.xml
-
Mullvad/App/en-US/iSCSI.adml.xml
-
Mullvad/App/en-US/msched.adml.xml
-
Mullvad/App/en-US/nca.adml
-
Mullvad/App/en-US/pca.adml.xml
-
Mullvad/App/en-US/sdiageng.adml.xml
-
Mullvad/App/en-US/srm-fci.adml.xml
-
Mullvad/App/en-US/tcpip.adml.xml
-
Mullvad/App/en-US/wlansvc.adml.xml
-
Mullvad/App/en-US/wwansvc.adml.xml
-
Mullvad/App/fthsvc.admx
-
Mullvad/App/hotspotauth.admx
-
Mullvad/App/iSCSI.admx
-
Mullvad/App/inetres.admx.xml
-
Mullvad/App/kdc.admx
-
Mullvad/App/msched.admx.xml
-
Mullvad/App/nca.admx
-
Mullvad/App/pca.admx
-
Mullvad/App/sdiageng.admx
-
Mullvad/App/srm-fci.admx
-
Mullvad/App/tcpip.admx.xml
-
Mullvad/App/wlansvc.admx.xml
-
Mullvad/App/wwansvc.admx.xml
-
Mullvad/Data/WinInit.admx
-
Mullvad/Data/WindowsColorSystem.admx
-
Mullvad/Data/WindowsConnectNow.admx
-
Mullvad/Data/WindowsDefender.admx
-
Mullvad/Data/WindowsExplorer.admx
-
Mullvad/Data/WindowsFileProtection.admx
-
Mullvad/Data/WindowsFirewall.admx
-
Mullvad/Data/WindowsMail.admx
-
Mullvad/Data/WindowsMediaDRM.admx
-
Mullvad/Data/WindowsMediaPlayer.admx
-
Mullvad/Data/WindowsMessenger.admx
-
Mullvad/Data/WindowsProducts.admx
-
Mullvad/Data/WindowsRemoteManagement.admx
-
Mullvad/Data/WindowsRemoteShell.admx
-
Mullvad/Data/WindowsServer.admx
-
Mullvad/Data/WindowsUpdate.admx
-
Mullvad/Setup.exe.exe windows x86
Password: vpn
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ