General

  • Target

    4c1f8f49835446488aa47e0c16c90743.bin

  • Size

    2.4MB

  • MD5

    4c1f8f49835446488aa47e0c16c90743

  • SHA1

    afc0ec4dacf0f4bc9e52ce8121fc4b08da62b747

  • SHA256

    d029906a972b203a8dc3db0aaa84545dec8b408733380054eb526326617b2852

  • SHA512

    7b5bede196c9d0843d70724b417ab7d4b72e40a5af44f352f14d5309d89a9b867578a9d765c0f43d14b3c4d3c2c02c4cc687a48916da5a6897e054aa4eab8aee

  • SSDEEP

    49152:jt42c280jwl0mswAhlabxZe7l19d+/4WVmOgGHIN1xdJuasA+qK:p82NO0jYbrE19d+8GHI3xdJJw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c1f8f49835446488aa47e0c16c90743.bin
    .7z

    Password: infected

  • tempy/7zz.exe
    .exe windows x86

    15847eb10d7d06dcd5980e8a9b786fd6


    Headers

    Imports

    Sections

  • tempy/ARCHIVE.bat
  • tempy/HTCTL32.DLL
    .dll windows x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tempy/NSM.LIC
  • tempy/NSM.ini
  • tempy/PCICHEK.DLL
    .dll windows x86

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tempy/PCICL32.DLL
    .dll windows x86

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tempy/TCCTL32.DLL
    .dll windows x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tempy/client32.exe
    .exe windows x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • tempy/client32.ini
  • tempy/hints.txt
  • tempy/msvcr100.dll
    .dll windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tempy/nskbfltr.inf
  • tempy/nsm_vpro.ini
  • tempy/pcicapi.dll
    .dll windows x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tempy/putty.exe
    .exe windows x64

    69573714e11441683ea863c40a1c0d54


    Code Sign

    Headers

    Imports

    Sections

  • tempy/readme.txt
  • tempy/remcmdstub.exe
    .exe windows x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections