NSGetModule
Overview
overview
1Static
static
content/mp...ts.xml
windows7-x64
1content/mp...ts.xml
windows10-2004-x64
1content/mp...ts.xml
windows7-x64
1content/mp...ts.xml
windows10-2004-x64
1content/mp...lay.js
windows7-x64
1content/mp...lay.js
windows10-2004-x64
1content/mp...ay.xml
windows7-x64
1content/mp...ay.xml
windows10-2004-x64
1content/mp...ay.xml
windows7-x64
1content/mp...ay.xml
windows10-2004-x64
1content/mp...ons.js
windows7-x64
1content/mp...ons.js
windows10-2004-x64
1content/mp...ns.xml
windows7-x64
1content/mp...ns.xml
windows10-2004-x64
1content/mp...lay.js
windows7-x64
1content/mp...lay.js
windows10-2004-x64
1content/mp...ay.xml
windows7-x64
1content/mp...ay.xml
windows10-2004-x64
1content/mp...mon.js
windows7-x64
1content/mp...mon.js
windows10-2004-x64
1locale/ja-...ts.xml
windows7-x64
1locale/ja-...ts.xml
windows10-2004-x64
1locale/nl-...ts.xml
windows7-x64
1locale/nl-...ts.xml
windows10-2004-x64
1locale/ru-...ts.xml
windows7-x64
1locale/ru-...ts.xml
windows10-2004-x64
1components/mpint.dll
windows7-x64
1components/mpint.dll
windows10-2004-x64
1install.js
windows7-x64
1install.js
windows10-2004-x64
1install.xml
windows7-x64
1install.xml
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
content/mpint/contents.xml
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
content/mpint/contents.xml
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
content/mpint/en-US/contents.xml
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
content/mpint/en-US/contents.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
content/mpint/mpintDOverlay.js
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
content/mpint/mpintDOverlay.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
content/mpint/mpintFDOverlay.xml
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
content/mpint/mpintFDOverlay.xml
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
content/mpint/mpintMDOverlay.xml
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
content/mpint/mpintMDOverlay.xml
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
content/mpint/mpintOptions.js
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
content/mpint/mpintOptions.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
content/mpint/mpintOptions.xml
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
content/mpint/mpintOptions.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
content/mpint/mpintOverlay.js
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
content/mpint/mpintOverlay.js
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
content/mpint/mpintOverlay.xml
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
content/mpint/mpintOverlay.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
content/mpint/mpintcommon.js
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
content/mpint/mpintcommon.js
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
locale/ja-JP/mpint/contents.xml
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
locale/ja-JP/mpint/contents.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
locale/nl-NL/mpint/contents.xml
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
locale/nl-NL/mpint/contents.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
locale/ru-RU/mpint/contents.xml
Resource
win7-20220901-en
Behavioral task
behavioral26
Sample
locale/ru-RU/mpint/contents.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
components/mpint.dll
Resource
win7-20221111-en
Behavioral task
behavioral28
Sample
components/mpint.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
install.js
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
install.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
install.xml
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
install.xml
Resource
win10v2004-20220812-en
General
-
Target
c71d05517a03048b562845ccec5d2969c043745a2109f3410fcc435c27c20260
-
Size
46KB
-
MD5
08535fb8be772b01dfece6f3fdd5915c
-
SHA1
89d2262af9d0b34adba49f3744a35dff571fe466
-
SHA256
c71d05517a03048b562845ccec5d2969c043745a2109f3410fcc435c27c20260
-
SHA512
8b7d209be42ba5601a61f288f61383d59948075781facbfa44e6ac4ecb8744f30996f01acdeaa9f9fdf3d0195897efd54f76e7575d59f7f7038bd7c66ff5d1bd
-
SSDEEP
768:afR13d4wF2oJwUTQ54+NVKURD30h+A5VleC5FsoNGyj6dkIGMMgGGz8DgXmaGJ46:aZ1JmCZ0D3bADleCp//PBgWaRSpX
Malware Config
Signatures
Files
-
c71d05517a03048b562845ccec5d2969c043745a2109f3410fcc435c27c20260.zip
-
chrome.manifest
-
chrome/mpint.jar.zip
-
content/mpint/contents.rdf.xml
-
content/mpint/deicon.png.png
-
content/mpint/en-US/contents.rdf.xml
-
content/mpint/en-US/mpint.dtd
-
content/mpint/iqicon.png.png
-
content/mpint/mdicon.png.png
-
content/mpint/mpint.png.png
-
content/mpint/mpintDOverlay.js.js
-
content/mpint/mpintFDOverlay.xul.xml
-
content/mpint/mpintMDOverlay.xul.xml
-
content/mpint/mpintOptions.js.js
-
content/mpint/mpintOptions.xul.xml
-
content/mpint/mpintOverlay.js.js
-
content/mpint/mpintOverlay.xul.xml
-
content/mpint/mpintcommon.js.js
-
content/mpint/oeicon.png.png
-
content/mpint/overlay.css
-
locale/ja-JP/mpint/contents.rdf.xml
-
locale/ja-JP/mpint/mpint.dtd
-
locale/nl-NL/mpint/contents.rdf.xml
-
locale/nl-NL/mpint/mpint.dtd
-
locale/ru-RU/mpint/contents.rdf.xml
-
locale/ru-RU/mpint/mpint.dtd
-
components/mpint.dll.dll windows x86
4c2f6cf36d5e341c2afa8bc2a5db8135
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetSetCookieA
kernel32
WinExec
CloseHandle
OpenProcess
Sleep
GetModuleFileNameA
SetCurrentDirectoryA
WideCharToMultiByte
DisableThreadLibraryCalls
GetFileAttributesA
user32
SendMessageA
EnumWindows
FindWindowA
GetWindowThreadProcessId
GetClassNameA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ole32
CoUninitialize
CoInitialize
psapi
GetModuleBaseNameA
msvcrt
_strlwr
_adjust_fdiv
_initterm
fopen
fgets
strncmp
fclose
_fullpath
strcpy
memcpy
strlen
sprintf
??2@YAPAXI@Z
free
malloc
??3@YAXPAX@Z
strchr
strftime
gmtime
time
__CxxFrameHandler
_stat
memset
nspr4
PR_smprintf_free
PR_UnloadLibrary
PR_LoadLibraryWithFlags
PR_Free
PR_GetLibraryFilePathname
PR_FindSymbolAndLibrary
PR_SetEnv
PR_smprintf
PR_FindSymbol
PR_GetEnv
PR_AtomicIncrement
PR_AtomicDecrement
plc4
PL_strrchr
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
components/mpint.xpt
-
components/sources.zip.zip
-
install.js.js
-
install.rdf.xml