General

  • Target

    e498b7a3b8c47519121d0f94bca46d9d4f4611a348377a1070cad78745e4f1b2

  • Size

    41.3MB

  • MD5

    89556175fd38967e0cd5ff64c6ac46e3

  • SHA1

    0ac8d346e0d28462b79523624e9a79ff3f4b44f6

  • SHA256

    e498b7a3b8c47519121d0f94bca46d9d4f4611a348377a1070cad78745e4f1b2

  • SHA512

    9bd2995c7cdbcf959f27397251c7ca7ee85f1ed8b446b5b1ba161a745588e3987883aca805ea4f4bea06d5a2bd944d97437c8676362547356afa1698e2cd39d7

  • SSDEEP

    393216:rmkZWV+fhjq9sPDvYf3RrkcRXE/MgIRrkcRXE/Mg72Dve:rJZWIFDvs4XY4XUDW

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 2 IoCs

    AutoIT scripts compiled to PE executables.

Files

  • e498b7a3b8c47519121d0f94bca46d9d4f4611a348377a1070cad78745e4f1b2
    .rar
  • ABCPY.INI
  • Setup.exe
    .exe windows x86

    870b8e75c7190e202e9c6c81dff1040c


    Headers

    Imports

    Sections

  • VC10RT_x32/vc_red.cab
    .cab
  • VC10RT_x64/vc_red.cab
    .cab
  • cracked dll/amtlib.dll
    .dll windows x86

    4b0c57d946dfe01328f9273843e36c36


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deployment/cs_CZ_Deployment.xml
    .xml
  • deployment/cs_CZ_Deployment_x64.xml
    .xml
  • deployment/cs_CZ_Hybrid_Deployment.xml
    .xml
  • deployment/en_AE_Deployment.xml
    .xml
  • deployment/en_AE_Deployment_x64.xml
    .xml
  • deployment/en_AE_Hybrid_Deployment.xml
    .xml
  • deployment/en_IL_Deployment.xml
    .xml
  • deployment/en_IL_Deployment_x64.xml
    .xml
  • deployment/en_IL_Hybrid_Deployment.xml
    .xml
  • deployment/fr_MA_Deployment.xml
    .xml
  • deployment/fr_MA_Deployment_x64.xml
    .xml
  • deployment/fr_MA_Hybrid_Deployment.xml
    .xml
  • deployment/hu_HU_Deployment.xml
    .xml
  • deployment/hu_HU_Deployment_x64.xml
    .xml
  • deployment/hu_HU_Hybrid_Deployment.xml
    .xml
  • deployment/pl_PL_Deployment.xml
    .xml
  • deployment/pl_PL_Deployment_x64.xml
    .xml
  • deployment/pl_PL_Hybrid_Deployment.xml
    .xml
  • deployment/ru_RU_Deployment.xml
    .xml
  • deployment/ru_RU_Deployment_x64.xml
    .xml
  • deployment/ru_RU_Hybrid_Deployment.xml
    .xml
  • deployment/tr_TR_Deployment.xml
    .xml
  • deployment/tr_TR_Deployment_x64.xml
    .xml
  • deployment/tr_TR_Hybrid_Deployment.xml
    .xml
  • deployment/uk_UA_Deployment.xml
    .xml
  • deployment/uk_UA_Deployment_x64.xml
    .xml
  • deployment/uk_UA_Hybrid_Deployment.xml
    .xml
  • dll data/BRD.dll
    .dll windows x86

    74f3d48387c79e736335bdde49e0507a


    Headers

    Imports

    Exports

    Sections

  • dll data/DTCommonRes.dll
    .dll windows x86

    6df4ce90cb968c7078afb5b100772d94


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • reg key/FLRegKey.reg
  • reg key/R2R.nfo
  • resources/Dictionary/cs_CZ/stringTable.zdct
  • resources/Dictionary/da_DK/stringTable.zdct
  • resources/Dictionary/de_DE/stringTable.zdct
  • resources/Dictionary/en_AE/stringTable.zdct
  • resources/Dictionary/en_GB/stringTable.zdct
  • resources/Dictionary/en_IL/stringTable.zdct
  • resources/Dictionary/en_US/stringTable.zdct
  • resources/Dictionary/en_XM/stringTable.zdct
  • resources/Dictionary/es_ES/stringTable.zdct
  • resources/Dictionary/es_LA/stringTable.zdct
  • resources/Dictionary/es_MX/stringTable.zdct
  • resources/Dictionary/es_NA/stringTable.zdct
  • resources/Dictionary/fi_FI/stringTable.zdct
  • resources/Dictionary/fr_CA/stringTable.zdct
  • resources/Dictionary/fr_FR/stringTable.zdct
  • resources/Dictionary/fr_MA/stringTable.zdct
  • resources/Dictionary/fr_XM/stringTable.zdct
  • resources/Dictionary/hu_HU/stringTable.zdct
  • resources/Dictionary/it_IT/stringTable.zdct
  • resources/Dictionary/ja_JP/stringTable.zdct
  • resources/Dictionary/ko_KR/stringTable.zdct
  • resources/Dictionary/nb_NO/stringTable.zdct
  • resources/Dictionary/nl_NL/stringTable.zdct
  • resources/Dictionary/pl_PL/stringTable.zdct
  • resources/Dictionary/pt_BR/stringTable.zdct
  • resources/Dictionary/ru_RU/stringTable.zdct
  • resources/Dictionary/sv_SE/stringTable.zdct
  • resources/Dictionary/tr_TR/stringTable.zdct
  • resources/Dictionary/uk_UA/stringTable.zdct
  • resources/Dictionary/zh_CN/stringTable.zdct
  • resources/Dictionary/zh_TW/stringTable.zdct
  • resources/PIM.dll
    .dll windows x86

    a59c5df6d9c9538fa988eb452256661e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/updaterinventory.dll
    .dll windows x86

    1c126edb5a5bedf745bfca7fbbcddecc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • transforms/1025.mst
  • transforms/1028.mst
  • transforms/1029.mst
  • transforms/1030.mst
  • transforms/1031.mst
  • transforms/1033.mst
  • transforms/1034.mst
  • transforms/1035.mst
  • transforms/1036.mst
  • transforms/1037.mst
  • transforms/1038.mst
  • transforms/1040.mst
  • transforms/1041.mst
  • transforms/1042.mst
  • transforms/1043.mst
  • transforms/1044.mst
  • transforms/1045.mst
  • transforms/1046.mst
  • transforms/1049.mst
  • transforms/1051.mst
  • transforms/1053.mst
  • transforms/1055.mst
  • transforms/1058.mst
  • transforms/1060.mst
  • transforms/2052.mst
  • transforms/6156.mst