Overview

overview

3

Static

static

3

MandiantEn...dio.7z

windows7-x64

3

MandiantEn...dio.7z

windows10-2004-x64

3

IntelAudioService.dll

windows7-x64

1

IntelAudioService.dll

windows10-2004-x64

1

IntelAudioService.exe

windows7-x64

1

IntelAudioService.exe

windows10-2004-x64

1

IntelAudio...config

windows7-x64

3

IntelAudio...config

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MandiantEngagementIntelAudio.7z

  • Size

    630KB

  • MD5

    7d8f3cc7dd022adef6fc8d7dfe308847

  • SHA1

    93599216ad58d501568c52c7014ad6f7fdb2561a

  • SHA256

    5e236acff828a79b31f44e491d8c4932a3eb6688ce83d24ed7f59fa69117cb6e

  • SHA512

    bc49f6e252bcb9aed5ded9c38d55c8370c1af74b89e97e4447eae63dde3f46c5bd485dba4d6f01887fab037ddbf06eea7e8370f3d310a5df0832b4848fba3e9a

  • SSDEEP

    12288:yZrSiKCzrslrSexLyVGUOo4Pmbu1xN55WzpinfBwtVW7Afcoy1v3:4ZKCzrs4edyVGskv5WViJgV65oI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • MandiantEngagementIntelAudio.7z
    .7z

    Password: infected

  • IntelAudioService.dll.7z
    .7z

    Password: infected

  • IntelAudioService.dll
    .dll windows x86

    Password: infected

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • IntelAudioService.exe.7z
    .7z

    Password: infected

  • IntelAudioService.exe
    .exe windows x64

    Password: infected


    Headers

    Sections

  • IntelAudioService.exe.config.7z
    .7z

    Password: infected

  • IntelAudioService.exe.config