Overview

overview

6

Static

static

3

rbrjfo.exe

windows7-x64

6

rbrjfo.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    tsbazh.7z

  • Size

    908KB

  • MD5

    d68a258040f0c0417da7f67789745f9e

  • SHA1

    e54fb75df64e798a2c3b8434e2946689d8b81ccc

  • SHA256

    da4115c3a9e9eeb9e80d0760541fdac5492eb913d64b49a5071800852f0d5e86

  • SHA512

    78a880c4053c94d351b1c78e8f84275bdc347e37b9c685dbfd81a7fc8cc01052952a5689fd396cd6bd08c0719db5398e3defd2234f6deee33caa42b278fc257c

  • SSDEEP

    24576:WgKQwPE/rzaDy66cc/YQy5cYa6XK3jqJM94VP:paDx6ccQQcTaTCM94VP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • tsbazh.7z
    .7z

    Password: infected

  • IPCamera.dll
    .dll windows x86

    Password: infected

    4eadd4efe1d04edfe6444d55b3f78a2b


    Headers

    Imports

    Exports

    Sections

  • NNPPS.dll
    .dll windows x86

    Password: infected

    2b803486a1273a2ce18703ec0f35b02f


    Headers

    Imports

    Exports

    Sections

  • NNPub.dll
    .dll regsvr32 windows x86

    Password: infected

    b11d54552f46edcde8e32355be9a4596


    Headers

    Imports

    Exports

    Sections

  • NetClient.dll
    .dll windows x86

    Password: infected

    d3e10c179e5a6c1a2656204e62f8e7ae


    Headers

    Imports

    Exports

    Sections

  • NetPlaySDK.dll
    .dll windows x86

    Password: infected

    f6663110cbe327303a337a4975c3c13a


    Headers

    Imports

    Exports

    Sections

  • TVProp.ini
  • hi_h264dec_w.dll
    .dll windows x86

    Password: infected

    623ad459796111563cc32f1972637f84


    Headers

    Imports

    Exports

    Sections

  • info.txt
  • rbrjfo.exe
    .exe windows x86

    Password: infected

    7c33789c1575be9b19accb9d50f2c4a6


    Headers

    Imports

    Sections