General

  • Target

    f8406bce17b4d4394318e9213c6999a4623954005b8a66a0e5c7bf670553dc21

  • Size

    2.7MB

  • MD5

    8baa5961f644971b66da55b59277c023

  • SHA1

    63fe071c6710d9205b22f3f6c7c4500cb25e23d6

  • SHA256

    f8406bce17b4d4394318e9213c6999a4623954005b8a66a0e5c7bf670553dc21

  • SHA512

    322d365ad5da53b80d3e4d0d15aea37aff0a26d62ab3bdaba7f626fe60403e9c7ad9307099140f5347a091367a7b36aa9338c61e451c6d23f58323b700c6a4cf

  • SSDEEP

    49152:ILyz7/mp/yhoyg8eFyVKQMbEQoqiVMdviGNwwBd8vB6bTNOyh4eKEMksx:SILmZyhoz8e2KdkqrhNwcW8bFh4eqx

Score
N/A

Malware Config

Signatures

Files

  • f8406bce17b4d4394318e9213c6999a4623954005b8a66a0e5c7bf670553dc21
    .rar
  • SSShim.dll
    .dll windows x64

    1f513b29ef2594a76a9bea27179c7725


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Startup_BeforeShell.cmd
  • StateRepository.Core.dll
    .dll windows x64

    4c3fa874e14bce243ec9e5ba9e661936


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • StorageUsage.dll
    .dll regsvr32 windows x64

    e297337c6894d234f495980eafac0074


    Headers

    Imports

    Exports

    Sections

  • Storprop.dll
    .dll windows x64

    ee3f1a97023c598aa2d0db59c39e70ad


    Headers

    Imports

    Exports

    Sections

  • StructuredQuery.dll
    .dll regsvr32 windows x64

    40bdaf1e50ae0a656bdb120f5352ab5f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SwitchToAdmin.cmd
  • SwitchToAdmin.ini
  • SwitchToAdminLogon.ini
  • SwitchToAdminPrepare.ini
  • SwitchToAdminSystem.cmd
  • SwitchToAdminSystem.ini
  • SwitchToSystem.ini
  • srvsvc.dll
    .dll windows x64

    f2c73ddaf7ec1d0d925e50b9450a5470


    Headers

    Imports

    Exports

    Sections

  • sscore.dll
    .dll windows x64

    7ead50a9c8aa9bf25fee75db2e7ba462


    Headers

    Imports

    Exports

    Sections

  • sscoreext.dll
    .dll windows x64

    68de4772527ad7e5f7744a5d78b60355


    Headers

    Imports

    Exports

    Sections

  • ssdpapi.dll
    .dll windows x64

    4207d3d1e1a994e014c07a8c6ff5596f


    Headers

    Imports

    Exports

    Sections

  • sspicli.dll
    .dll windows x64

    1a813d04520e602a9e31cb5e06f81d1d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sspisrv.dll
    .dll windows x64

    8c979524d7d5e58007aaa4041c740e50


    Headers

    Imports

    Exports

    Sections

  • sstpsvc.dll
    .dll windows x64

    3ad282878aa37da82bbb738573a71130


    Headers

    Imports

    Exports

    Sections

  • start_vss.cmd
  • startnet.exe
    .exe .vbs windows x64
  • stclient.dll
    .dll regsvr32 windows x64

    7ffb0c9f77d1d50514b48616150a5ba4


    Headers

    Imports

    Exports

    Sections

  • stdole2.tlb
    .dll windows x64


    Headers

    Sections

  • stdole32.tlb
    .dll windows x86


    Headers

    Sections

  • sti.dll
    .dll regsvr32 windows x64

    e306996a5f8572d03ad9140b3737c960


    Headers

    Imports

    Exports

    Sections

  • stobject.dll
    .dll windows x64

    71a0efd3c8ee083e270c8dd4aa3f1020


    Headers

    Imports

    Exports

    Sections

  • storagecontexthandler.dll
    .dll regsvr32 windows x64

    17a953cdf8a49a1037f648cee909858b


    Headers

    Imports

    Exports

    Sections

  • storagewmi.dll
    .dll regsvr32 windows x64

    53e4e1a91d81e45140b69dfc3cd6a068


    Headers

    Imports

    Exports

    Sections

  • storagewmi_passthru.dll
    .dll windows x64

    6f7709427b39522d320db43d823215b1


    Headers

    Imports

    Exports

    Sections

  • streamci.dll
    .dll windows x64

    7b0d944fc5abece123a1f9bb8c5643ed


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • subst.exe
    .exe windows x64

    657724bef967c549a066ecf72a628438


    Headers

    Imports

    Sections

  • sud.dll
    .dll regsvr32 windows x64

    bc3f41c44860ef6194d2f0680eaa8d1c


    Headers

    Imports

    Exports

    Sections

  • svchost.exe
    .exe windows x64

    247b9220e5d9b720a82b2c8b5069ad69


    Code Sign

    Headers

    Imports

    Sections

  • svsvc.dll
    .dll windows x64

    4017383f3c7ccc134002d37a3e731cf7


    Headers

    Imports

    Exports

    Sections

  • swprv.dll
    .dll regsvr32 windows x64

    cc3beb5fc58e73e98c323ed573d6227e


    Headers

    Imports

    Exports

    Sections

  • sxproxy.dll
    .dll regsvr32 windows x64

    e9f8499c634fe6d1d124a31b47a8ecf8


    Headers

    Imports

    Exports

    Sections

  • sxs.dll
    .dll windows x64

    6de0f7a8bbc62d2cc10e30b6f33f0899


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sxshared.dll
    .dll regsvr32 windows x64

    c44d718caaa51e42552782a8021674bf


    Headers

    Imports

    Exports

    Sections