General

  • Target

    Setup.zip

  • Size

    37.3MB

  • MD5

    26344cb4d3d6863c66c84d0b3f845218

  • SHA1

    8ab4aefdc8eb938e0668db192651cc323544a313

  • SHA256

    a5018742581413737f1077839697134af868702507cdbb83cd9a4b0d1489e969

  • SHA512

    78078115b7397d6eca7e84ec33987298ccee988ab01ea4dae21ed63d2db058c2a54458cc6973d3a90e26f106b20e16e8a1fadd606149b931b869dfba188f9aec

  • SSDEEP

    786432:sILrHHGC19cbfbCQpSULxxXm5YijuKTsdVFQnTq1qtcu2z+bvn3GQLqqhtxMiS7:sqnGCISOxc5t7UInTwBu2iThqqXxMiS7

Score
10/10

Malware Config

Extracted

Family

aurora

C2

79.137.202.158:8081

Signatures

Files

  • Setup.zip
    .zip

    Password: 5550

  • Readme.txt
  • Setup.exe
    .exe windows x64

    Password: 5550

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections

  • bin/LogSession.dll
    .dll windows x64

    Password: 5550

    0d3caeb14664cf9dd2c8801007639394


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Microsoft.AI.MachineLearning.dll
    .dll windows x64

    Password: 5550

    b5b5672173d6202d88bb447a9eafd22b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/TFKGEOM.dll
    .dll windows x64

    Password: 5550

    f2bd7b0ddf154a4f56c5f2678076ce75


    Code Sign

    Headers

    Imports

    Sections

  • bin/TFUGEOM.dll
    .dll windows x64

    Password: 5550

    abb6bb718be1b890adc7adb576676dcc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/TfFontMgr.dll
    .dll windows x64

    Password: 5550

    e9aa3bfb06be1283ff650591f61dfbb8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/TfKernel.dll
    .dll windows x64

    Password: 5550

    9500cbe142afeffe4999d99e6ea29543


    Code Sign

    Headers

    Imports

    Sections

  • bin/libifcoremd.dll
    .dll windows x64

    Password: 5550

    9b14b7fa019c28e47846cb285d611b05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/libiomp5md.dll
    .dll windows x64

    8955d67c514834906e2c972f094636ca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/libmmd.dll
    .dll windows x64

    16786963892ffdedcdbf3cace68bc46a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/libzip.dll
    .dll windows x64

    1107138316db580ac0fe1cc6c06039a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/mediacoreif.dll
    .dll windows x64

    0c1f2bdb799136574971d9b258b22ee3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/onnxruntime.dll
    .dll windows x64

    f6f6bfad84cf760f635ee2e240792da1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/opencv_world452.dll
    .dll windows x64

    5440895330c3854aa93b94c31ec40e13


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/pdfport.dll
    .dll windows x64

    1ed6014492f2080d5e6e7c62fa149621


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/svml_dispmd.dll
    .dll windows x64

    b7a67ccb667656b25d37384d7d2c03f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/tbb12.dll
    .dll windows x64

    cc4480b8cafd975052b26a074368192d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/tbbmalloc.dll
    .dll windows x64

    c2af27ce6f5216e713694f9fd91a2ee9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings.cmd