Overview

overview

5

Static

static

sample.tar

windows7-x64

3

sample.tar

windows10-2004-x64

3

AntiSpywareControl.js

windows7-x64

1

AntiSpywareControl.js

windows10-2004-x64

1

CacheDumpControl.js

windows7-x64

1

CacheDumpControl.js

windows10-2004-x64

1

Debug/fgdump.exe

windows7-x64

1

Debug/fgdump.exe

windows10-2004-x64

1

HostDumper.js

windows7-x64

1

HostDumper.js

windows10-2004-x64

1

PWDumpControl.js

windows7-x64

1

PWDumpControl.js

windows10-2004-x64

1

ProtectedS...rol.js

windows7-x64

1

ProtectedS...rol.js

windows10-2004-x64

1

PwDump.exe

windows7-x64

1

PwDump.exe

windows10-2004-x64

1

Release/fgdump.exe

windows7-x64

1

Release/fgdump.exe

windows10-2004-x64

1

ResourceLoader.js

windows7-x64

1

ResourceLoader.js

windows10-2004-x64

1

cachedump.exe

windows7-x64

1

cachedump.exe

windows10-2004-x64

5

cachedump/...mp.exe

windows7-x64

1

cachedump/...mp.exe

windows10-2004-x64

5

fgdump.xml

windows7-x64

1

fgdump.xml

windows10-2004-x64

1

fgexec.exe

windows7-x64

1

fgexec.exe

windows10-2004-x64

1

fgexec/Deb...ec.exe

windows7-x64

1

fgexec/Deb...ec.exe

windows10-2004-x64

1

fgexec/Rel...ec.exe

windows7-x64

1

fgexec/Rel...ec.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5df6d9c1242391b19832a9880bb343f68631a1a32bee541f0dface41a4a4c65d

  • Size

    1.2MB

  • MD5

    af71edeeb02cd69485512bb6cad49665

  • SHA1

    c6a5c9c33e59f9ba1afa6417d77e4423f6ce2e26

  • SHA256

    5df6d9c1242391b19832a9880bb343f68631a1a32bee541f0dface41a4a4c65d

  • SHA512

    b8a74e7a61a70c4481c848fd712b9c1f77539dcd961d81d561237b8158cb08fb092bb5bdaf3caa6397d67a866e2ab79f7cb0db9af7eca999c4a0bffb70005b14

  • SSDEEP

    24576:DjuWVafsGxH0DpAfwWHbx+jwUCx4xCckWyQGh1o3Qv4DtiTrEUP4:DjBEsnewWHbxBxeCcbSN484i4

Score
N/A

Malware Config

Signatures

Files

  • 5df6d9c1242391b19832a9880bb343f68631a1a32bee541f0dface41a4a4c65d
    .bz2
  • sample
    .tar .js
  • AUTHORS
  • AVStatus.h
  • AntiSpywareControl.cpp
    .js
  • AntiSpywareControl.h
  • COPYING
  • CacheDumpControl.cpp
    .js
  • CacheDumpControl.h
  • Debug/fgdump.exe
    .exe windows x86

    868cb7f1b3f21aceb6cb2fd9fe989a8a


    Headers

    Imports

    Sections

  • ErrorHandler.cpp
  • ErrorHandler.h
  • HostDumper.cpp
    .js
  • HostDumper.h
  • INSTALL
  • Impersonator.cpp
  • Impersonator.h
  • LogWriter.cpp
  • LogWriter.h
  • Main.cpp
  • McAfeeControl.cpp
  • McAfeeControl.h
  • NetUse.cpp
  • NetUse.h
  • PWDumpControl.cpp
    .js
  • PWDumpControl.h
  • Process.cpp
  • Process.h
  • ProtectedStorageControl.cpp
    .js
  • ProtectedStorageControl.h
  • PwDump.exe
    .exe windows x86

    632969ddf6dbf4e0f53424b75e4b91f2


    Headers

    Imports

    Sections

  • README
  • RegQuery.cpp
  • RegQuery.h
  • Release/fgdump.exe
    .exe windows x86

    8d51bacf64ac3e45703d0a2b73c0d05b


    Headers

    Imports

    Sections

  • ResourceLoader.cpp
    .js
  • ResourceLoader.h
  • ServiceControl.cpp
  • ServiceControl.h
  • ShareFinder.cpp
  • ShareFinder.h
  • SophosControl.cpp
  • SophosControl.h
  • StringArray.cpp
  • StringArray.h
  • SymantecAVControl.cpp
  • SymantecAVControl.h
  • XGetopt.cpp
  • XGetopt.h
  • cachedump.exe
    .exe windows x86

    1281cbbeeb6094afa3992d31c7393074


    Headers

    Imports

    Sections

  • cachedump/cachedump-1.2-fgpatch1.patch
  • cachedump/cachedump.c
  • cachedump/cachedump.exe
    .exe windows x86

    1281cbbeeb6094afa3992d31c7393074


    Headers

    Imports

    Sections

  • cachedump/cachedump.h
  • cachedump/getpid.c
  • cachedump/lsastuff.c
  • cachedump/md5.c
  • cachedump/md5.h
  • cachedump/rc4.c
  • cachedump/rc4.h
  • cachedump/readme.txt
  • cachedump/service.c
  • cachedump/version.txt
  • fgdump.cpp
  • fgdump.h
  • fgdump.rc
  • fgdump.sln
  • fgdump.vcproj
    .xml
  • fgexec.exe
    .exe windows x86

    5652942959a5cb6994ae8b6d76cdbf00


    Headers

    Imports

    Sections

  • fgexec/AUTHORS
  • fgexec/COPYING
  • fgexec/Debug/fgexec.exe
    .exe windows x86

    1453fbc48f97e1c7fe3909a06d21ab7c


    Headers

    Imports

    Sections

  • fgexec/INSTALL
  • fgexec/Process.cpp
  • fgexec/Process.h
  • fgexec/README
  • fgexec/Release/fgexec.exe
    .exe windows x86

    f5ca537c40e7246de506f3cadd1c9d5a


    Headers

    Imports

    Sections

  • fgexec/XGetopt.cpp
  • fgexec/XGetopt.h
  • fgexec/fgexec.cpp
    .js
  • fgexec/fgexec.vcproj
    .xml
  • fgexec/stdafx.cpp
  • fgexec/stdafx.h
  • imokav.exe
    .exe windows x86

    cbb6ea69caf8741e77d91023f8c9c90b


    Headers

    Imports

    Sections

  • lstarget.dll
    .dll windows x86

    2bb81e6cc710a9f6ae133c6adb777d9e


    Headers

    Imports

    Exports

    Sections

  • pstgdump.exe
    .exe windows x86

    f38a14b98597618926f15856879f2f5f


    Headers

    Imports

    Sections

  • pstgdump/AUTHORS
  • pstgdump/COPYING
  • pstgdump/Debug/pstgdump.exe
    .exe windows x86

    a90c02abb8e70055e03e9c555fc4eb35


    Headers

    Imports

    Sections

  • pstgdump/INSTALL
  • pstgdump/ProtectedStorage.cpp
  • pstgdump/ProtectedStorage.h
  • pstgdump/README
  • pstgdump/Release/pstgdump.exe
    .exe windows x86

    f38a14b98597618926f15856879f2f5f


    Headers

    Imports

    Sections

  • pstgdump/XGetopt.cpp
  • pstgdump/XGetopt.h
  • pstgdump/pstgdump.cpp
  • pstgdump/pstgdump.vcproj
    .xml
  • pstgdump/stdafx.cpp
  • pstgdump/stdafx.h
  • pwdump6/BlowfishStringConvert.h
  • pwdump6/COPYING
  • pwdump6/LsaExt.c
  • pwdump6/LsaExt.dsp
  • pwdump6/LsaExtDebug/lstarget.dll
    .dll windows x86

    6d7df12f6cc2bd83006769cc57f76bf9


    Headers

    Imports

    Exports

    Sections

  • pwdump6/LsaExtRelease/lstarget.dll
    .dll windows x86

    2bb81e6cc710a9f6ae133c6adb777d9e


    Headers

    Imports

    Exports

    Sections

  • pwdump6/PwDump6.cpp
    .js
  • pwdump6/PwDump6.dsp
  • pwdump6/PwDump6.dsw
  • pwdump6/PwDumpDebug/PwDump.exe
    .exe windows x86

    6b1df8a338af8d56416c50af945886f7


    Headers

    Imports

    Sections

  • pwdump6/PwDumpDebug/imokav.exe
    .exe windows x86

    0b58feccd1a878d798caa41028277c59


    Headers

    Imports

    Sections

  • pwdump6/PwDumpDebug/lstarget.dll
    .dll windows x86

    6d7df12f6cc2bd83006769cc57f76bf9


    Headers

    Imports

    Exports

    Sections

  • pwdump6/PwDumpRelease/PwDump.exe
    .exe windows x86

    632969ddf6dbf4e0f53424b75e4b91f2


    Headers

    Imports

    Sections

  • pwdump6/PwDumpRelease/imokav.exe
    .exe windows x86

    cbb6ea69caf8741e77d91023f8c9c90b


    Headers

    Imports

    Sections

  • pwdump6/PwDumpRelease/lstarget.dll
    .dll windows x86

    2bb81e6cc710a9f6ae133c6adb777d9e


    Headers

    Imports

    Exports

    Sections

  • pwdump6/PwserviceDebug/imokav.exe
    .exe windows x86

    0b58feccd1a878d798caa41028277c59


    Headers

    Imports

    Sections

  • pwdump6/PwserviceRelease/imokav.exe
    .exe windows x86

    cbb6ea69caf8741e77d91023f8c9c90b


    Headers

    Imports

    Sections

  • pwdump6/README
  • pwdump6/XGetopt.c
  • pwdump6/XGetopt.h
  • pwdump6/blowfish.c
  • pwdump6/blowfish.h
  • pwdump6/config.h
  • pwdump6/pwdump.rc
  • pwdump6/pwservice.cpp
  • pwdump6/pwservice.dsp
  • pwdump6/resource.h
  • resource.h
  • stdafx.cpp
  • stdafx.h