General

  • Target

    SetupFiles.rar

  • Size

    29.1MB

  • MD5

    983bee6efa102f67242db2a362c7bebd

  • SHA1

    ac105c10309faeb72e8b3668b1489a52f97a03e0

  • SHA256

    78557a4199e9726381e834ce2e9d4f5c42e3b559e15b150cb6ac79c49cbe9d66

  • SHA512

    9bcfc176f2af10a1347d510848eb32a94b008a1bf90c15a6f4861390a10da36f8c3d0d87667460b9ecd8d71439229200a6b69364a13e754fb3fda1873b7b49a9

  • SSDEEP

    393216:ODpyjNaQOsNLPgcJFw648hJIx4aPS42Vh0QprRjhR2MhIJ1aDqGK8tN7NSQlPJS+:Ody3/FvJFw64535GuEdhQWZl9lPJbr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • SetupFiles.rar
    .rar
  • SetupFiles/About/ActiveXInstallService.admx
  • SetupFiles/About/AddRemovePrograms.admx
  • SetupFiles/About/AppCompat.admx
  • SetupFiles/About/AppXRuntime.admx
    .xml
  • SetupFiles/About/AppxPackageManager.admx
  • SetupFiles/About/AttachmentManager.admx
  • SetupFiles/About/AuditSettings.admx
    .xml
  • SetupFiles/About/AutoPlay.admx
  • SetupFiles/About/Biometrics.admx
  • SetupFiles/About/CEIPEnable.admx
  • SetupFiles/About/COM.admx
  • SetupFiles/About/CipherSuiteOrder.admx
  • SetupFiles/About/ControlPanel.admx
  • SetupFiles/About/Cpls.admx
  • SetupFiles/About/CredUI.admx
  • SetupFiles/About/CredentialProviders.admx
  • SetupFiles/About/CtrlAltDel.admx
  • SetupFiles/About/DCOM.admx
  • SetupFiles/About/DFS.admx
  • SetupFiles/About/DWM.admx
  • SetupFiles/About/DeviceCompat.admx
  • SetupFiles/About/DeviceSetup.admx
  • SetupFiles/About/DigitalLocker.admx
  • SetupFiles/About/DiskDiagnostic.admx
  • SetupFiles/About/DiskNVCache.admx
  • SetupFiles/About/DiskQuota.admx
  • SetupFiles/About/DistributedLinkTracking.admx
  • SetupFiles/About/EAIME.admx
  • SetupFiles/About/EarlyLaunchAM.admx
  • SetupFiles/About/EdgeUI.admx
  • SetupFiles/About/EncryptFilesonMove.admx
  • SetupFiles/About/Engine.dll
    .dll windows x64

    Password: 1515

    84f0be4fead8f529deb9fc674f592461


    Headers

    Imports

    Exports

    Sections

  • SetupFiles/About/EventForwarding.admx
    .xml
  • SetupFiles/About/EventViewer.admx
  • SetupFiles/About/Explorer.admx
  • SetupFiles/About/ExternalBoot.admx
    .xml
  • SetupFiles/About/FileHistory.admx
  • SetupFiles/About/FileRecovery.admx
  • SetupFiles/About/FileRevocation.admx
  • SetupFiles/About/FileServerVSSProvider.admx
  • SetupFiles/About/FileSys.admx
    .xml
  • SetupFiles/About/FolderRedirection.admx
  • SetupFiles/About/FramePanes.admx
  • SetupFiles/About/GameExplorer.admx
  • SetupFiles/About/GroupPolicy-Server.admx
  • SetupFiles/About/Help.admx
  • SetupFiles/About/HelpAndSupport.admx
  • SetupFiles/About/IIS.admx
  • SetupFiles/About/InkWatson.admx
  • SetupFiles/About/Kerberos.admx
  • SetupFiles/About/LanmanServer.admx
  • SetupFiles/About/LeakDiagnostic.admx
  • SetupFiles/About/LinkLayerTopologyDiscovery.admx
  • SetupFiles/About/LocationProviderAdm.admx
  • SetupFiles/About/MMC.admx
  • SetupFiles/About/MMCSnapIns2.admx
  • SetupFiles/About/MSDT.admx
  • SetupFiles/About/MediaCenter.admx
  • SetupFiles/About/MobilePCMobilityCenter.admx
  • SetupFiles/About/MobilePCPresentationSettings.admx
  • SetupFiles/About/Msi-FileRecovery.admx
  • SetupFiles/About/NAPXPQec.admx
  • SetupFiles/About/NCSI.admx
  • SetupFiles/About/NetworkIsolation.admx
  • SetupFiles/About/NetworkProjection.admx
  • SetupFiles/About/P2P-pnrp.admx
  • SetupFiles/About/ParentalControls.admx
  • SetupFiles/About/PeerToPeerCaching.admx
  • SetupFiles/About/PenTraining.admx
  • SetupFiles/About/PerformanceDiagnostics.admx
  • SetupFiles/About/Sharing.admx
  • SetupFiles/About/Shell-CommandPrompt-RegEditTools.admx
  • SetupFiles/About/ShellWelcomeCenter.admx
  • SetupFiles/About/Sidebar.admx
  • SetupFiles/About/SkyDrive.admx
    .xml
  • SetupFiles/About/Snis.admx
  • SetupFiles/About/Snmp.admx
  • SetupFiles/About/SoundRec.admx
  • SetupFiles/About/SystemRestore.admx
  • SetupFiles/About/TPM.admx
  • SetupFiles/About/TaskScheduler.admx
  • SetupFiles/About/Thumbnails.admx
  • SetupFiles/About/TouchInput.admx
  • SetupFiles/About/W32Time.admx
  • SetupFiles/About/WCM.admx
  • SetupFiles/About/WDI.admx
  • SetupFiles/About/WPN.admx
  • SetupFiles/About/WinCal.admx
    .xml
  • SetupFiles/About/WinInit.admx
  • SetupFiles/About/WinLogon.admx
  • SetupFiles/About/WindowsAnytimeUpgrade.admx
  • SetupFiles/About/WindowsBackup.admx
  • SetupFiles/About/WindowsColorSystem.admx
  • SetupFiles/About/WindowsConnectNow.admx
  • SetupFiles/About/WindowsFileProtection.admx
  • SetupFiles/About/WindowsMail.admx
  • SetupFiles/About/WindowsMediaDRM.admx
  • SetupFiles/About/WindowsMessenger.admx
  • SetupFiles/About/WindowsProducts.admx
  • SetupFiles/About/WindowsRemoteShell.admx
  • SetupFiles/About/WindowsServer.admx
  • SetupFiles/About/Winsrv.admx
  • SetupFiles/About/WordWheel.admx
  • SetupFiles/About/WorkFolders-Client.admx
  • SetupFiles/About/WorkplaceJoin.admx
    .xml
  • SetupFiles/About/bin/WidevineCdm/510.209.0/_metadat/verified_connect.json
  • SetupFiles/About/bin/WidevineCdm/510.209.0/_platform_scific/win_x86/widevinecdml.sig
  • SetupFiles/About/bin/WidevineCdm/510.209.0/manifdest.fingerprint
  • SetupFiles/About/bin/WidevineCdm/510.209.0/mein.json
  • SetupFiles/About/bin/ceff.pak
    .js
  • SetupFiles/About/data
  • SetupFiles/About/en-US/ActiveXInstallService.adml
    .xml
  • SetupFiles/About/en-US/AppXRuntime.adml
    .xml
  • SetupFiles/About/en-US/AppxPackageManager.adml
    .xml
  • SetupFiles/About/en-US/AuditSettings.adml
    .xml
  • SetupFiles/About/en-US/AutoPlay.adml
    .xml
  • SetupFiles/About/en-US/Biometrics.adml
    .xml
  • SetupFiles/About/en-US/CEIPEnable.adml
    .xml
  • SetupFiles/About/en-US/COM.adml
    .xml
  • SetupFiles/About/en-US/Cpls.adml
    .xml
  • SetupFiles/About/en-US/CredUI.adml
    .xml
  • SetupFiles/About/en-US/CredentialProviders.adml
    .xml
  • SetupFiles/About/en-US/CtrlAltDel.adml
    .xml
  • SetupFiles/About/en-US/DCOM.adml
    .xml
  • SetupFiles/About/en-US/DFS.adml
    .xml
  • SetupFiles/About/en-US/DWM.adml
    .xml
  • SetupFiles/About/en-US/DeviceCompat.adml
    .xml
  • SetupFiles/About/en-US/DigitalLocker.adml
    .xml
  • SetupFiles/About/en-US/DiskDiagnostic.adml
    .xml
  • SetupFiles/About/en-US/DiskNVCache.adml
    .xml
  • SetupFiles/About/en-US/DistributedLinkTracking.adml
    .xml
  • SetupFiles/About/en-US/EarlyLaunchAM.adml
  • SetupFiles/About/en-US/EdgeUI.adml
    .xml
  • SetupFiles/About/en-US/EncryptFilesonMove.adml
    .xml
  • SetupFiles/About/en-US/EventForwarding.adml
    .xml
  • SetupFiles/About/en-US/EventViewer.adml
    .xml
  • SetupFiles/About/en-US/Explorer.adml
    .xml
  • SetupFiles/About/en-US/ExternalBoot.adml
    .xml
  • SetupFiles/About/en-US/FileHistory.adml
    .xml
  • SetupFiles/About/en-US/FileRecovery.adml
    .xml
  • SetupFiles/About/en-US/FileRevocation.adml
    .xml
  • SetupFiles/About/en-US/FileServerVSSProvider.adml
    .xml
  • SetupFiles/About/en-US/FileSys.adml
    .xml
  • SetupFiles/About/en-US/FramePanes.adml
    .xml
  • SetupFiles/About/en-US/GameExplorer.adml
    .xml
  • SetupFiles/About/en-US/GroupPolicy-Server.adml
    .xml
  • SetupFiles/About/en-US/HelpAndSupport.adml
    .xml
  • SetupFiles/About/en-US/IIS.adml
    .xml
  • SetupFiles/About/en-US/InkWatson.adml
    .xml
  • SetupFiles/About/en-US/LeakDiagnostic.adml
    .xml
  • SetupFiles/About/en-US/LinkLayerTopologyDiscovery.adml
    .xml
  • SetupFiles/About/en-US/LocationProviderAdm.adml
    .xml
  • SetupFiles/About/en-US/MMC.adml
    .xml
  • SetupFiles/About/en-US/MMCSnapIns2.adml
    .xml
  • SetupFiles/About/en-US/MSDT.adml
    .xml
  • SetupFiles/About/en-US/MediaCenter.adml
    .xml
  • SetupFiles/About/en-US/MobilePCMobilityCenter.adml
    .xml
  • SetupFiles/About/en-US/MobilePCPresentationSettings.adml
    .xml
  • SetupFiles/About/en-US/Msi-FileRecovery.adml
    .xml
  • SetupFiles/About/en-US/NAPXPQec.adml
    .xml
  • SetupFiles/About/en-US/NCSI.adml
    .xml
  • SetupFiles/About/en-US/NetworkProjection.adml
    .xml
  • SetupFiles/About/en-US/ParentalControls.adml
    .xml
  • SetupFiles/About/en-US/PenTraining.adml
    .xml
  • SetupFiles/About/en-US/PerformancePerftrack.adml
    .xml
  • SetupFiles/About/en-US/PreviousVersions.adml
    .xml
  • SetupFiles/About/en-US/PswdSync.adml
    .xml
  • SetupFiles/About/en-US/RacWmiProv.adml
    .xml
  • SetupFiles/About/en-US/Radar.adml
    .xml
  • SetupFiles/About/en-US/ReAgent.adml
    .xml
  • SetupFiles/About/en-US/Reliability.adml
    .xml
  • SetupFiles/About/en-US/Securitycenter.adml
    .xml
  • SetupFiles/About/en-US/Sensors.adml
    .xml
  • SetupFiles/About/en-US/ServerManager.adml
    .xml
  • SetupFiles/About/en-US/Servicing.adml
    .xml
  • SetupFiles/About/en-US/Setup.adml
    .xml
  • SetupFiles/About/en-US/SharedFolders.adml
    .xml
  • SetupFiles/About/en-US/Sharing.adml
    .xml
  • SetupFiles/About/en-US/Shell-CommandPrompt-RegEditTools.adml
    .xml
  • SetupFiles/About/en-US/ShellWelcomeCenter.adml
    .xml
  • SetupFiles/About/en-US/Sidebar.adml
    .xml
  • SetupFiles/About/en-US/SkyDrive.adml
    .xml
  • SetupFiles/About/en-US/Snis.adml
    .xml
  • SetupFiles/About/en-US/Snmp.adml
    .xml
  • SetupFiles/About/en-US/SoundRec.adml
    .xml
  • SetupFiles/About/en-US/SystemRestore.adml
    .xml
  • SetupFiles/About/en-US/Thumbnails.adml
    .xml
  • SetupFiles/About/en-US/TouchInput.adml
    .xml
  • SetupFiles/About/en-US/WDI.adml
    .xml
  • SetupFiles/About/en-US/WinCal.adml
    .xml
  • SetupFiles/About/en-US/WinInit.adml
    .xml
  • SetupFiles/About/en-US/WindowsAnytimeUpgrade.adml
    .xml
  • SetupFiles/About/en-US/WindowsBackup.adml
    .xml
  • SetupFiles/About/en-US/WindowsColorSystem.adml
    .xml
  • SetupFiles/About/en-US/WindowsConnectNow.adml
    .xml
  • SetupFiles/About/en-US/WindowsFileProtection.adml
    .xml
  • SetupFiles/About/en-US/WindowsMail.adml
    .xml
  • SetupFiles/About/en-US/WindowsMediaDRM.adml
    .xml
  • SetupFiles/About/en-US/WindowsMessenger.adml
    .xml
  • SetupFiles/About/en-US/WindowsProducts.adml
    .xml
  • SetupFiles/About/en-US/WindowsRemoteShell.adml
    .xml
  • SetupFiles/About/en-US/WindowsServer.adml
    .xml
  • SetupFiles/About/en-US/Winsrv.adml
    .xml
  • SetupFiles/About/en-US/WordWheel.adml
    .xml
  • SetupFiles/About/en-US/WorkFolders-Client.adml
    .xml
  • SetupFiles/About/en-US/WorkplaceJoin.adml
    .xml
  • SetupFiles/About/en-US/fthsvc.adml
    .xml
  • SetupFiles/About/en-US/hotspotauth.adml
    .xml
  • SetupFiles/About/en-US/iSCSI.adml
    .xml
  • SetupFiles/About/en-US/msched.adml
    .xml
  • SetupFiles/About/en-US/sdiageng.adml
    .xml
  • SetupFiles/About/en-US/wlansvc.adml
    .xml
  • SetupFiles/About/en-US/wwansvc.adml
    .xml
  • SetupFiles/About/fthsvc.admx
  • SetupFiles/About/hotspotauth.admx
  • SetupFiles/About/iSCSI.admx
  • SetupFiles/About/kdc.admx
  • SetupFiles/About/msched.admx
    .xml
  • SetupFiles/About/nca.admx
  • SetupFiles/About/pca.admx
  • SetupFiles/About/srm-fci.admx
  • SetupFiles/About/wlansvc.admx
    .xml
  • SetupFiles/About/wwansvc.admx
    .xml
  • SetupFiles/Readme.txt
  • SetupFiles/Setup_win32_64.exe
    .exe windows x86

    Password: 1515

    d1a0ce120514abdf032d29efaf0843e4


    Headers

    Imports

    Sections

  • SetupFiles/package/Bin/WidevineCdm/4.10.2209.0/_metadata/verified_contents.json
  • SetupFiles/package/Bin/WidevineCdm/4.10.2209.0/_platform_specific/win_x86/widevinecdm.dll
    .dll windows x86

    Password: 1515

    0b5d0e0a9e6cf85570f75da0455465ed


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SetupFiles/package/Bin/WidevineCdm/4.10.2209.0/_platform_specific/win_x86/widevinecdm.dll.sig
  • SetupFiles/package/Bin/WidevineCdm/4.10.2209.0/cef.pak
    .js
  • SetupFiles/package/Bin/WidevineCdm/4.10.2209.0/manifest.fingerprint
  • SetupFiles/package/Bin/WidevineCdm/4.10.2209.0/manifest.json
  • SetupFiles/package/Bin/cef.pak
    .js
  • SetupFiles/package/Engine.dll
    .dll windows x64

    Password: 1515

    84f0be4fead8f529deb9fc674f592461


    Headers

    Imports

    Exports

    Sections

  • SetupFiles/package/cef.pak
    .js
  • SetupFiles/package/libintl-8.dll
    .dll windows x64

    Password: 1515

    eeaab5e869156145e036dcce679fb0a9


    Headers

    Imports

    Exports

    Sections

  • SetupFiles/package/libwinpthread-1.dll
    .dll windows x64

    Password: 1515

    22ec93d55773cd5a4e361857683e4a86


    Headers

    Imports

    Exports

    Sections