General

  • Target

    PW-1234-uрdаtе-2023.rar

  • Size

    52.4MB

  • MD5

    acc1a8db891acf8e45f910bdd9e1e7ad

  • SHA1

    580e025aadc27e75775bd2f7872b093a267179df

  • SHA256

    0f48e8efeed6683cf4ead95969cd5b4f456e57609b6bf2c5789ac5371c43e0d2

  • SHA512

    a77df49f7313f4c39db818e4d3abd1b2ed6d56ce2a2046ea4860c5b92b0d6254164b8f1069c3e34900b5dc7694542332a4925fc6eb5056cde2343e651571ea02

  • SSDEEP

    1572864:c5FdlgUhxzhqM2AGD7EYpWaZMcuWMqrbX7:sFjFBUsGDLUaZMQ5X

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • PW-1234-uрdаtе-2023.rar
    .rar
  • PW-1234-uрdаtе-2023/new/Core/AuditPolicyGPManagedStubs.Interop/v4.0_10.0.0.0__31bf3856ad364e35/AuditPolicyGPManagedStubs.Interop.dll
    .dll windows x86

    Password: 1234

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/CustomMarshalers/v4.0_4.0.0.0__b03f5f7f11d50a3a/CustomMarshalers.dll
    .dll windows x86

    Password: 1234

    80e5cc4ceaea14f385140ce06c2a3846


    Code Sign

    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/DBXUpdateKB.bin
  • PW-1234-uрdаtе-2023/new/Core/ISymWrapper/v4.0_4.0.0.0__b03f5f7f11d50a3a/ISymWrapper.dll
    .dll windows x86

    Password: 1234

    4b8df15fdd3a139d26af7a39217d444b


    Code Sign

    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Microsoft.AppV.AppvClientComConsumer.Resources/v4.0_10.0.0.0_en_31bf3856ad364e35/Microsoft.AppV.AppvClientComConsumer.resources.dll
    .dll windows x86

    Password: 1234

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Microsoft.AppV.AppvClientComConsumer.Resources/v4.0_10.0.0.0_ru_31bf3856ad364e35/Microsoft.AppV.AppvClientComConsumer.resources.dll
  • PW-1234-uрdаtе-2023/new/Core/Microsoft.AppV.AppvClientComConsumer/v4.0_10.0.0.0__31bf3856ad364e35/Microsoft.AppV.AppvClientComConsumer.dll
    .dll windows x86

    Password: 1234

    d9e51dcc7e7e5d2ce777270c278ff33f


    Code Sign

    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Microsoft.CertificateServices.PKIClient.Cmdlets/v4.0_10.0.0.0__31bf3856ad364e35/Microsoft.CertificateServices.PKIClient.Cmdlets.dll
    .dll windows x86

    Password: 1234

    b0b3d5d2557ff770becfd2c474883404


    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Microsoft.CertificateServices.PKIClient.Cmdlets/v4.0_10.0.0.0__31bf3856ad364e35/pki.psd1
  • PW-1234-uрdаtе-2023/new/Core/Microsoft.CertificateServices.PKIClient.Cmdlets/v4.0_10.0.0.0__31bf3856ad364e35/pki.types.ps1xml
    .xml .ps1
  • PW-1234-uрdаtе-2023/new/Core/Microsoft.ConfigCI.Commands.Resources/v4.0_10.0.0.0_en_31bf3856ad364e35/Microsoft.ConfigCI.Commands.Resources.dll
    .dll windows x86

    Password: 1234

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Microsoft.ConfigCI.Commands.Resources/v4.0_10.0.0.0_ru_31bf3856ad364e35/Microsoft.ConfigCI.Commands.Resources.dll
    .dll windows x86

    Password: 1234

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Microsoft.ConfigCI.Commands/v4.0_10.0.0.0__31bf3856ad364e35/ConfigCI.psd1
  • PW-1234-uрdаtе-2023/new/Core/Microsoft.ConfigCI.Commands/v4.0_10.0.0.0__31bf3856ad364e35/Microsoft.ConfigCI.Commands.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Microsoft.GroupPolicy.AdmTmplEditor.Resources/v4.0_10.0.0.0_en_31bf3856ad364e35/Microsoft.GroupPolicy.AdmTmplEditor.Resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Microsoft.GroupPolicy.AdmTmplEditor.Resources/v4.0_10.0.0.0_ru_31bf3856ad364e35/Microsoft.GroupPolicy.AdmTmplEditor.Resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Microsoft.GroupPolicy.AdmTmplEditor/v4.0_10.0.0.0__31bf3856ad364e35/Microsoft.GroupPolicy.AdmTmplEditor.dll
    .dll windows x86

    6d1cfc3e11bfe62a52ad89bedccfc1d8


    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Microsoft.GroupPolicy.Interop/v4.0_2.0.0.0__31bf3856ad364e35/Microsoft.GroupPolicy.Interop.dll
    .dll windows x86

    fd56f3d998fe5c308370d9dcf2a744e4


    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Microsoft.KeyDistributionService.Cmdlets/v4.0_10.0.0.0__31bf3856ad364e35/Kds.psd1
  • PW-1234-uрdаtе-2023/new/Core/Microsoft.KeyDistributionService.Cmdlets/v4.0_10.0.0.0__31bf3856ad364e35/Microsoft.KeyDistributionService.Cmdlets.dll
    .dll windows x86

    d0840f0db38ade7d2237ba3cbc876aeb


    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Microsoft.Management.Infrastructure.Native/v4.0_1.0.0.0__31bf3856ad364e35/Microsoft.Management.Infrastructure.Native.dll
    .dll windows x86


    Headers

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Qt5PrintSupport.dll
    .dll windows x64

    4ae6e93672c5b877a7fb4fedfeb9a705


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Qt5Svg.dll
    .dll windows x64

    4b9f61ba07e09a43286a25d03c631385


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/Qt5WebSockets.dll
    .dll windows x64

    1ff857eff2fe2dce5ccf752daa98b47d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PW-1234-uрdаtе-2023/new/Core/dbupdate.bin
  • PW-1234-uрdаtе-2023/new/Core/dbxupdate.bin
  • PW-1234-uрdаtе-2023/new/Defender__Settings.vbs
    .vbs
  • PW-1234-uрdаtе-2023/new/Readme_.txt
  • PW-1234-uрdаtе-2023/new/Scripts/BootIni/MemoryInit.ini
  • PW-1234-uрdаtе-2023/new/Setuр .exe
    .exe windows x86

    9e54a226f537ac9776f04cf7554ffa52


    Headers

    Imports

    Sections

  • PW-1234-uрdаtе-2023/new/msdadc.dll
    .dll regsvr32 windows x86

    e0bd3263fd5ea99b1d0c2f6f5194cc24


    Headers

    Imports

    Exports

    Sections

  • PW-1234-uрdаtе-2023/new/msdaer.dll
    .dll regsvr32 windows x86

    e0bd3263fd5ea99b1d0c2f6f5194cc24


    Headers

    Imports

    Exports

    Sections

  • PW-1234-uрdаtе-2023/new/msdatl3.dll
    .dll windows x86

    9920e4b4b31b4631dfb899834d887561


    Headers

    Imports

    Exports

    Sections

  • PW-1234-uрdаtе-2023/new/msdatt.dll
    .dll regsvr32 windows x86

    e0bd3263fd5ea99b1d0c2f6f5194cc24


    Headers

    Imports

    Exports

    Sections

  • PW-1234-uрdаtе-2023/new/msdaurl.dll
    .dll regsvr32 windows x86

    e0bd3263fd5ea99b1d0c2f6f5194cc24


    Headers

    Imports

    Exports

    Sections

  • PW-1234-uрdаtе-2023/new/oledb32r.dll
    .dll windows x86


    Headers

    Sections